Lucene search

[email protected]CVE-2007-0651

HistoryFeb 15, 2007 - 11:28 p.m.

CVE-2007-0651

2007-02-1523:28:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

mailenable professional

xss

cve-2007-0651

security vulnerability

remote attack

6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.01 Low

EPSS

Percentile

83.4%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Professional before 2.37 allow remote attackers to inject arbitrary Javascript script via (1) e-mail messages and (2) the ID parameter to (a) right.asp, (b) Forms/MAI/list.asp, and © Forms/VCF/list.asp in mewebmail/base/default/lang/EN/.

CPENameOperatorVersion
mailenable:mailenable_professionalmailenable mailenable professionaleq1.107
mailenable:mailenable_professionalmailenable mailenable professionaleq1.14
mailenable:mailenable_professionalmailenable mailenable professionaleq2.33
mailenable:mailenable_professionalmailenable mailenable professionaleq1.101
mailenable:mailenable_professionalmailenable mailenable professionaleq1.52
mailenable:mailenable_professionalmailenable mailenable professionaleq1.15
mailenable:mailenable_professionalmailenable mailenable professionaleq1.115
mailenable:mailenable_professionalmailenable mailenable professionaleq1.17
mailenable:mailenable_professionalmailenable mailenable professionaleq1.106
mailenable:mailenable_professionalmailenable mailenable professionaleq1.0.007

CPE	Name	Operator	Version
mailenable:mailenable_professional	mailenable mailenable professional	eq	1.107
mailenable:mailenable_professional	mailenable mailenable professional	eq	1.14
mailenable:mailenable_professional	mailenable mailenable professional	eq	2.33
mailenable:mailenable_professional	mailenable mailenable professional	eq	1.101
mailenable:mailenable_professional	mailenable mailenable professional	eq	1.52
mailenable:mailenable_professional	mailenable mailenable professional	eq	1.15
mailenable:mailenable_professional	mailenable mailenable professional	eq	1.115
mailenable:mailenable_professional	mailenable mailenable professional	eq	1.17
mailenable:mailenable_professional	mailenable mailenable professional	eq	1.106
mailenable:mailenable_professional	mailenable mailenable professional	eq	1.0.007

Rows per page:

1-10 of 611

References

osvdb.org/33188

osvdb.org/33189

osvdb.org/33190

secunia.com/advisories/23998

secunia.com/secunia_research/2007-38/advisory/

securityreason.com/securityalert/2258

www.mailenable.com/Professional20-ReleaseNotes.txt

www.securityfocus.com/archive/1/460063/100/0/threaded

www.securityfocus.com/bid/22554

www.vupen.com/english/advisories/2007/0595

exchange.xforce.ibmcloud.com/vulnerabilities/32476

exchange.xforce.ibmcloud.com/vulnerabilities/32480

Social References

6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.01 Low

EPSS

Percentile

83.4%

JSON

Related for CVE-2007-0651

prion1 securityvulns2 nessus1