PT-2011-4008

Name of the Vulnerable Software and Affected Versions Novell GroupWise versions 8.0 before HP3 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in WebAccess. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the...

CVE-2011-2661: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in WebAccess in Novell GroupWise 8.0 before HP3 allow remote attackers to inject arbitrary web script or HTML via the 1 Directory.Item.name or 2 Directory.Item.displayName parameter...