CVE-2008-3817

Memory leak in Cisco ASA 5500 Series and Cisco PIX (software 8.0 before 8.0(4) and 8.1 before 8.1(2)) triggered by the hardware crypto accelerator initialization code can be exploited by a crafted sequence of packets to cause a DoS via memory exhaustion. The issue is specific to crypto accelerato...

CVE-2007-3817

Cross-site scripting XSS vulnerability in the LoginToboggan module 4.7.x-1.0, 4.7.x-1.x-dev, and 5.x-1.x-dev before 20070712 for Drupal, when configured to display a "Log out" link, allows remote attackers to inject arbitrary web script or HTML via a crafted username. NOTE: Drupal sanitizes the...

CVE-2007-3817

Cross-site scripting XSS vulnerability in the LoginToboggan module 4.7.x-1.0, 4.7.x-1.x-dev, and 5.x-1.x-dev before 20070712 for Drupal, when configured to display a "Log out" link, allows remote attackers to inject arbitrary web script or HTML via a crafted username. NOTE: Drupal sanitizes the...

CVE-2007-3817

CVE-2007-3817 is an XSS vulnerability in Drupal’s LoginToboggan module (versions 4.7.x-1.0, 4.7.x-1.x-dev, 5.x-1.x-dev prior to 20070712) that is triggerable when the site renders a Log out link. A crafted username can inject arbitrary script/HTML. Drupal sanitizes usernames by removing certain c...

CVE-2006-3817

CVE-2006-3817 is a cross-site scripting (XSS) vulnerability in Novell GroupWise WebAccess 6.5 and 7 prior to 20060727. The issue arises from improper handling of user-supplied input in email content encoded with UTF-7, allowing an attacker to inject and execute arbitrary script via a SCRIPT eleme...

CVE-2005-3817

CVE-2005-3817 refers to multiple SQL injection vulnerabilities in Softbiz Web Host Directory Script 1.1 and earlier. The flaws allow remote SQL commands via (1) cid in search_result.php, (2) sbres_id in review.php, (3) cid in browsecats.php, (4) h_id in email.php, and (5) an unspecified parameter...