Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-2570 State: PUBLISHED Published: 2007-05-09T21:00:00 Last Updated: 2024-08-07T13:42:33.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in handlers/page/show.php in Wikivi5 allows remote attackers to execute arbitrary PHP code via a URL in the sous_rep parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1678 - http://secunia.com/advisories/25170 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34100 - http://osvdb.org/35776 - https://www.exploit-db.com/exploits/3863 - http://www.attrition.org/pipermail/vim/2007-May/001606.html
CVE ID: CVE-2007-2571 State: PUBLISHED Published: 2007-05-09T21:00:00 Last Updated: 2024-08-07T13:42:33.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the wfquotes 1.0 0 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the c parameter in a cat action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34101 - https://www.exploit-db.com/exploits/3862 - http://www.vupen.com/english/advisories/2007/1677 - http://osvdb.org/34473 - http://secunia.com/advisories/25171
CVE ID: CVE-2007-2572 State: PUBLISHED Published: 2007-05-09T21:00:00 Last Updated: 2024-08-07T13:42:33.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in modules/noevents/templates/mfa_theme.php in NoAh (aka PHP Content Architect, phparch) 0.9 pre 1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the tpls[1] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34103 - http://osvdb.org/37656 - https://www.exploit-db.com/exploits/3861 - http://www.vupen.com/english/advisories/2007/1676
CVE ID: CVE-2007-2573 State: PUBLISHED Published: 2007-05-09T21:00:00 Last Updated: 2024-08-07T13:42:33.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in plugin/HP_DEV/cms2.php in PHPtree 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the s_dir parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34106 - https://www.exploit-db.com/exploits/3860 - http://secunia.com/advisories/25174 - http://www.vupen.com/english/advisories/2007/1675 - http://osvdb.org/35819
CVE ID: CVE-2007-2574 State: PUBLISHED Published: 2007-05-09T21:00:00 Last Updated: 2024-08-07T13:42:33.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Archangel Weblog 0.90.02 allows remote attackers to read arbitrary files via a .. (dot dot) in the index parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/41731 - https://www.exploit-db.com/exploits/3859
CVE ID: CVE-2007-2575 State: PUBLISHED Published: 2007-05-09T21:00:00 Last Updated: 2024-08-07T13:42:33.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in watermark.php in the vm (aka Jean-Francois Laflamme) watermark 0.4.1 mod for Gallery allows remote attackers to execute arbitrary PHP code via a URL in the GALLERY_BASEDIR parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3857 - http://www.vupen.com/english/advisories/2007/1674 - http://osvdb.org/37655 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34112
CVE ID: CVE-2007-2576 State: PUBLISHED Published: 2007-05-09T21:00:00 Last Updated: 2024-08-07T13:42:33.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the East Wind Software advdaudio.ocx 1.5.1.1 ActiveX control allows user-assisted remote attackers to execute arbitrary code via a long OpenDVD property value. NOTE: this issue might be related to CVE-2007-0976. Additional Analyst Notes: - CVE Program Container: References: - http://moaxb.blogspot.com/2007_05_05_archive.html - https://www.exploit-db.com/exploits/3856 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34119 - http://www.shinnai.altervista.org/moaxb/20070505/east.txt - http://www.securityf
ce.ibmcloud.com/vulnerabilities/34119 - http://www.shinnai.altervista.org/moaxb/20070505/east.txt - http://www.securityfocus.com/bid/23833 - http://osvdb.org/34337 - http://moaxb.blogspot.com/2007/05/moaxb-05-east-wind-software.html
CVE ID: CVE-2007-2577 State: PUBLISHED Published: 2007-05-09T21:00:00 Last Updated: 2024-08-07T13:42:33.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ACP3 4.0 beta 3 allow remote attackers to execute arbitrary SQL commands via (1) the mode parameter to feeds.php, the (2) form[cat] parameter to (a) news/list/index.php or (b) certain news/details/id_*/action_create/index.php files, or (3) the form[mods][] parameter to search/list/action_search/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/36185 - http://securityreason.com/securityalert/2686 - http://www.securityfocus.com/bid/23834 - h
- http://www.osvdb.org/36185 - http://securityreason.com/securityalert/2686 - http://www.securityfocus.com/bid/23834 - http://www.osvdb.org/36186 - http://www.securityfocus.com/archive/1/467746/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34111 - http://www.osvdb.org/36184 - http://www.osvdb.org/36187
CVE ID: CVE-2007-2578 State: PUBLISHED Published: 2007-05-09T21:00:00 Last Updated: 2024-08-07T13:42:33.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in search/list/action_search/index.php in ACP3 4.0 beta 3 allows remote attackers to have unknown impact, relating to "Cookie Manipulation", via the form[search_term] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2686 - http://www.securityfocus.com/bid/23834 - http://www.securityfocus.com/archive/1/467746/100/0/threaded - http://osvdb.org/36183
CVE ID: CVE-2007-2579 State: PUBLISHED Published: 2007-05-09T21:00:00 Last Updated: 2024-08-07T13:42:33.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ACP3 4.0 beta 3 allow remote attackers to inject arbitrary web script or HTML via (1) the form[mail] parameter to contact/contact/index.php; the (2) form[mods][] or (3) form[search_term] parameter to search/list/action_search/index.php; (4) the id parameter to modules/dl/download.php; (5) the form[cat] parameter to news/list/index.php; the (6) form[cat], (7) form[name], or (8) form[message] parameter to certain news/details/id_*/action_create/index.php files; or (9) the fo
(7) form[name], or (8) form[message] parameter to certain news/details/id_*/action_create/index.php files; or (9) the form[mail] parameter to newsletter/create/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/36193 - http://securityreason.com/securityalert/2686 - http://www.securityfocus.com/bid/23834 - http://www.osvdb.org/36188 - http://www.securityfocus.com/archive/1/467746/100/0/threaded - http://www.osvdb.org/36192 - http://www.osvdb.org/36191 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34110 - http://www.osvdb.org/36189 - http://www.osvdb.org/36190
CVE ID: CVE-2007-2580 State: PUBLISHED Published: 2007-05-09T21:00:00 Last Updated: 2024-08-07T13:42:33.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Apple Safari allows local users to obtain sensitive information (saved keychain passwords) via the document.loginform.password.value JavaScript parameter loaded from an AppleScript script. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/468719/100/0/threaded - http://www.securityfocus.com/archive/1/467676/100/0/threaded - http://securityreason.com/securityalert/2685 - http://www.securityfocus.com/archive/1/468650/100/0/threaded - http://www.se
p://securityreason.com/securityalert/2685 - http://www.securityfocus.com/archive/1/468650/100/0/threaded - http://www.securityfocus.com/archive/1/468639/100/0/threaded - http://www.securityfocus.com/archive/1/468737/100/0/threaded - http://www.securityfocus.com/archive/1/468727/100/0/threaded - http://www.securityfocus.com/bid/23825 - http://www.securityfocus.com/archive/1/468869/100/0/threaded - http://www.securityfocus.com/archive/1/468544/100/0/threaded - http://www.osvdb.org/35569 - http://www.securityfocus.com/archive/1/468585/100/0/threaded
CVE ID: CVE-2007-2581 State: PUBLISHED Published: 2007-05-09T21:00:00 Last Updated: 2024-08-07T13:42:33.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Microsoft Windows SharePoint Services 3.0 for Windows Server 2003 and Office SharePoint Server 2007 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO (query string) in "every main page," as demonstrated by default.aspx. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2286 - http://www.securityfocus.com/bid/23832 - https://docs.microsoft.com/
rch/definition/oval%3Aorg.mitre.oval%3Adef%3A2286 - http://www.securityfocus.com/bid/23832 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-059 - http://securitytracker.com/id?1018789 - http://archives.neohapsis.com/archives/bugtraq/2007-05/0196.html - http://www.securityfocus.com/archive/1/482366/100/0/threaded - http://www.securityfocus.com/archive/1/482366/100/0/threaded - http://osvdb.org/37630 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34343 - http://www.securityfocus.com/archive/1/467738/100/0/threaded - http://secunia.com/advisories/27148 - http://www.vupen.com/english/advisories/2007/3439 - http://securityreason.com/securityalert/2682 - http
visories/27148 - http://www.vupen.com/english/advisories/2007/3439 - http://securityreason.com/securityalert/2682 - http://www.securityfocus.com/archive/1/467749/100/0/threaded - http://www.us-cert.gov/cas/techalerts/TA07-282A.html
CVE ID: CVE-2007-2582 State: PUBLISHED Published: 2007-05-09T22:00:00 Last Updated: 2024-08-07T13:42:33.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the DB2 JDBC Applet Server (DB2JDS) service in IBM DB2 9.x and earlier allow remote attackers to (1) execute arbitrary code via a crafted packet to the DB2JDS service on tcp/6789; and cause a denial of service via (2) an invalid LANG parameter or (2) a long packet that generates a "MemTree overflow." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26010 - http://www.securitytracker.com/id?1018029 - http://www.securitytracker.com/id?1018801 - http://
ityfocus.com/bid/26010 - http://www.securitytracker.com/id?1018029 - http://www.securitytracker.com/id?1018801 - http://www.zerodayinitiative.com/advisories/ZDI-07-056.html - http://www-1.ibm.com/support/search.wss?rs=0&q=IY97750&apar=only - https://exchange.xforce.ibmcloud.com/vulnerabilities/34184 - http://osvdb.org/40973 - http://osvdb.org/40975 - http://www.vupen.com/english/advisories/2007/1707 - http://www.securityfocus.com/bid/23890 - http://secunia.com/advisories/25148 - http://www.securityfocus.com/archive/1/482024/100/0/threaded
CVE ID: CVE-2007-2583 State: PUBLISHED Published: 2007-05-09T22:00:00 Last Updated: 2024-08-07T13:42:33.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-dependent attackers to cause a denial of service (crash) via a crafted IF clause that results in a divide-by-zero error and a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1731 - http://secunia.com/advisories/27823 - http://secunia.com/advisories/25196 - http://secunia.com/advisories/25188 - https://issues.rpath.com/browse/RP
s/27823 - http://secunia.com/advisories/25196 - http://secunia.com/advisories/25188 - https://issues.rpath.com/browse/RPL-1356 - http://secunia.com/advisories/25389 - http://www.trustix.org/errata/2007/0017/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/34232 - http://security.gentoo.org/glsa/glsa-200705-11.xml - http://bugs.mysql.com/bug.php?id=27513 - http://www.exploit-db.com/exploits/30020 - http://secunia.com/advisories/25946 - http://www.securityfocus.com/bid/23911 - http://www.debian.org/security/2007/dsa-1413 - http://lists.mysql.com/commits/23685 - https://usn.ubuntu.com/528-1/ - http://www.mandriva.com/security/advisories?name=MDKSA-2007:139 - https://oval.cisecurity.org/r
/usn.ubuntu.com/528-1/ - http://www.mandriva.com/security/advisories?name=MDKSA-2007:139 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9930 - http://secunia.com/advisories/30351 - http://secunia.com/advisories/27155 - http://www.osvdb.org/34734 - http://secunia.com/advisories/25255 - http://secunia.com/advisories/28838 - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html - http://www.redhat.com/support/errata/RHSA-2008-0364.html - http://packetstormsecurity.com/files/124295/MySQL-5.0.x-Denial-Of-Service.html
CVE ID: CVE-2007-2584 State: PUBLISHED Published: 2007-05-09T22:00:00 Last Updated: 2024-08-07T13:42:33.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the IsOldAppInstalled function in the McSubMgr.McSubMgr Subscription Manager ActiveX control (MCSUBMGR.DLL) in McAfee SecurityCenter before 6.0.25 and 7.x before 7.2.147 allows remote attackers to execute arbitrary code via a crafted argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018028 - http://www.securityfocus.com/bid/23888 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=528 - http://osvdb.org/35874 - http://secunia.com/
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=528 - http://osvdb.org/35874 - http://secunia.com/advisories/25173 - http://www.vupen.com/english/advisories/2007/1717 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34179 - http://www.securityfocus.com/bid/23909 - http://ts.mcafeehelp.com/faq3.asp?docid=419189
CVE ID: CVE-2007-2585 State: PUBLISHED Published: 2007-05-09T22:00:00 Last Updated: 2024-08-07T13:42:33.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Verify function in the BarCodeWiz ActiveX control 2.0 and 2.52 (BarcodeWiz.dll) allows remote attackers to execute arbitrary code via a long argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.shinnai.altervista.org/moaxb/20070509/barcodewiz.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/34180 - http://secunia.com/advisories/25209 - http://www.vupen.com/english/advisories/2007/1728 - http://osvdb.org/35869 - http://moaxb.blogspot.com/2007/05/moaxb
9 - http://www.vupen.com/english/advisories/2007/1728 - http://osvdb.org/35869 - http://moaxb.blogspot.com/2007/05/moaxb-09-barcodewiz-activex-control-20.html - http://www.securityfocus.com/bid/23891
CVE ID: CVE-2007-2586 State: PUBLISHED Published: 2007-05-09T22:00:00 Last Updated: 2024-08-07T13:42:33.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FTP Server in Cisco IOS 11.3 through 12.4 does not properly check user authorization, which allows remote attackers to execute arbitrary code, and have other impact including reading startup-config, as demonstrated by a crafted MKD command that involves access to a VTY device and overflows a buffer, aka bug ID CSCek55259. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a00808399d0.shtml - http://www.securityfocus.com/archive/1/494868 - http
m/en/US/products/products_security_advisory09186a00808399d0.shtml - http://www.securityfocus.com/archive/1/494868 - http://www.vupen.com/english/advisories/2007/1749 - http://secunia.com/advisories/25199 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34197 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5036 - http://www.securitytracker.com/id?1018030 - http://www.securityfocus.com/bid/23885 - http://seclists.org/bugtraq/2009/Jan/0183.html - http://www.exploit-db.com/exploits/6155 - http://www.osvdb.org/35334
CVE ID: CVE-2007-2587 State: PUBLISHED Published: 2007-05-09T22:00:00 Last Updated: 2024-08-07T13:42:33.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IOS FTP Server in Cisco IOS 11.3 through 12.4 allows remote authenticated users to cause a denial of service (IOS reload) via unspecified vectors involving transferring files (aka bug ID CSCse29244). Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a00808399d0.shtml - http://www.vupen.com/english/advisories/2007/1749 - http://secunia.com/advisories/25199 - http://www.osvdb.org/35335 - http://www.securitytracker.com/id?1018030 - https://oval.
://secunia.com/advisories/25199 - http://www.osvdb.org/35335 - http://www.securitytracker.com/id?1018030 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5444 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34196 - http://www.securityfocus.com/bid/23885
CVE ID: CVE-2007-2588 State: PUBLISHED Published: 2007-05-09T22:00:00 Last Updated: 2024-08-07T13:42:33.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the Office Viewer OCX ActiveX control (oa.ocx) 3.2 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long argument to the (1) HttpDownloadFile, (2) Open, (3) OpenWebFile, (4) DoOleCommand, (5) FTPDownloadFile, (6) FTPUploadFile, (7) HttpUploadFile, (8) Save, or (9) SaveWebFile function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25143 - http://www.vupen.com/english/advisories/2007/1664 - http://mo
ainer: References: - http://secunia.com/advisories/25143 - http://www.vupen.com/english/advisories/2007/1664 - http://moaxb.blogspot.com/2007/05/moaxb-04-office-viewer-oaocx-v-32.html - http://www.shinnai.altervista.org/moaxb/20070504/oa.txt - http://osvdb.org/34335 - http://www.securityfocus.com/bid/23811 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34067
CVE ID: CVE-2007-2589 State: PUBLISHED Published: 2007-05-11T03:55:00 Last Updated: 2024-08-07T13:42:33.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in compose.php in SquirrelMail 1.4.0 through 1.4.9a allows remote attackers to send e-mails from arbitrary users via certain data in the SRC attribute of an IMG element. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2732 - http://secunia.com/advisories/25200 - http://www.vupen.com/english/advisories/2007/1748 - http://secunia.com/advisories/25320 - http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.
/2007/1748 - http://secunia.com/advisories/25320 - http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/34219 - http://www.squirrelmail.org/security/issue/2007-05-09 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:106 - http://www.novell.com/linux/security/advisories/2007_13_sr.html - http://docs.info.apple.com/article.html?artnum=306172 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11448 - https://rhn.redhat.com/errata/RHSA-2007-0358.html - http://www.securityfocus.com/bid/25159 - http://osvdb.org/35889 - http://secunia.com/advisories/25787 - http://secunia.co
ttp://www.securityfocus.com/bid/25159 - http://osvdb.org/35889 - http://secunia.com/advisories/25787 - http://secunia.com/advisories/26235
CVE ID: CVE-2007-2590 State: PUBLISHED Published: 2007-05-11T03:55:00 Last Updated: 2024-08-07T13:42:33.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allows remote attackers to obtain user names and other sensitive information via a direct request to (1) usrmgr/userList.asp or (2) usrmgr/userStatusList.asp. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34514 - http://www.sec-consult.com/289.html - http://www.vupen.com/english/advisories/2007/1727 - http://www.securityfocus.com/arc
tp://www.sec-consult.com/289.html - http://www.vupen.com/english/advisories/2007/1727 - http://www.securityfocus.com/archive/1/468048/100/0/threaded - http://secunia.com/advisories/25212 - http://securityreason.com/securityalert/2689
CVE ID: CVE-2007-2591 State: PUBLISHED Published: 2007-05-11T03:55:00 Last Updated: 2024-08-07T13:42:33.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: usrmgr/userList.asp in Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allows remote attackers to modify user account details and cause a denial of service (account deactivation) via the userid parameter in an update action. Additional Analyst Notes: - CVE Program Container: References: - http://www.sec-consult.com/289.html - http://www.vupen.com/english/advisories/2007/1727 - http://www.securityfocus.com/archive/1/
w.sec-consult.com/289.html - http://www.vupen.com/english/advisories/2007/1727 - http://www.securityfocus.com/archive/1/468048/100/0/threaded - http://secunia.com/advisories/25212 - http://securityreason.com/securityalert/2689 - http://osvdb.org/34513
CVE ID: CVE-2007-2592 State: PUBLISHED Published: 2007-05-11T03:55:00 Last Updated: 2024-08-07T13:42:33.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter to de/pda/dev_logon.asp and (2) multiple unspecified vectors in (a) usrmgr/registerAccount.asp, (b) de/create_account.asp, and other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.sec-con
create_account.asp, and other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.sec-consult.com/289.html - http://osvdb.org/34517 - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5005120.html - http://www.vupen.com/english/advisories/2007/1727 - http://secunia.com/advisories/26199 - http://osvdb.org/34516 - http://osvdb.org/34515 - http://www.securityfocus.com/archive/1/468048/100/0/threaded - http://www.securitytracker.com/id?1018454 - http://secunia.com/advisories/25212 - http://securityreason.com/securityalert/2689 - http://www.vupen.com/english/advisories/2007/2657 - http://www.securityfocus.com/bid/23889 - https://exchange.xforce
9 - http://www.vupen.com/english/advisories/2007/2657 - http://www.securityfocus.com/bid/23889 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34187