CVE-2007-5581

🗓️ 08 Nov 2007 02:00:00Reported by ciscoType

cve🔗 web.nvd.nist.gov👁 65 Views🌐 WEB

CVE-2007-5581 Cross-site scripting vulnerabilities in mpweb/scripts/mpx.dl

Reporter	Title	Published	Views	Family All 7
Cisco	Cisco Unified MeetingPlace Login Screen Cross-Site Scripting Vulnerability	7 Nov 200714:56	–	cisco
Cvelist	CVE-2007-5581	8 Nov 200702:00	–	cvelist
EUVD	EUVD-2007-5556	7 Oct 202500:30	–	euvd
NVD	CVE-2007-5581	8 Nov 200702:46	–	nvd
Prion	Cross site scripting	8 Nov 200702:46	–	prion
Rapid7 Vulnerability Database (full)	CVE-2007-5581: Improper Neutralization of Input During Web Page Generation	8 Nov 200700:00	–	rapid7
seebug.org	Cisco Unified MeetingPlace跨站脚本执行漏洞	11 Nov 200700:00	–	seebug

NVD

Node

OR

cisco unified_meetingplaceRange≤5.4

cisco unified_meetingplaceMatch4.3.0.246

cisco unified_meetingplaceMatch4.3.0.246.5

cisco unified_meetingplaceMatch5

cisco unified_meetingplaceMatch5.0

cisco unified_meetingplaceMatch5.2

cisco unified_meetingplaceMatch5.3

cisco unified_meetingplaceMatch6.0

Source	Link
secunia	www.secunia.com/advisories/26462
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/38298
cisco	www.cisco.com/warp/public/707/cisco-sr-20071107-mp.shtml
securityfocus	www.securityfocus.com/bid/26364
vupen	www.vupen.com/english/advisories/2007/3772
securitytracker	www.securitytracker.com/id

Parameter	Position	Path	Description	CWE
FirstName	query param	mpweb/scripts/mpx.dll	Cross-site scripting vulnerability in mpweb/scripts/mpx.dll via FirstName and LastName parameters on the login screen.	CWE-79
LastName	query param	mpweb/scripts/mpx.dll	Cross-site scripting vulnerability in mpweb/scripts/mpx.dll via FirstName and LastName parameters on the login screen.	CWE-79

16 Jun 2026 22:46Current

5.8Medium risk

Vulners AI Score5.8

CVSS 24.3

EPSS0.01223

cve-2007-5581 cross-site scripting xss vulnerabilities mpweb mpx.dll cisco unified meetingplace