Webtrends Log Analyzer Security Vulnerabilities

CVE-1999-0916

WebTrends software stores account names and passwords in a file which does not have restricted access permissions.

CVE-2003-1583

Cross-site scripting (XSS) vulnerability in WebTrends allows remote attackers to inject arbitrary web script or HTML via a crafted client domain name, related to an "Inverse Lookup Log Corruption (ILLC)" issue.