CVE-2007-3254

CVE-2007-3254 covers multiple stored and reflected XSS vulnerabilities in Xythos Enterprise Document Manager (XEDM) versions prior to 5.0.25.8 and 6.x prior to 6.0.46.1. The issues enable remote authenticated users to inject arbitrary HTML/JavaScript via (1) a saved Workflow name; (2) a Workflow ...

CVE-2007-3255

CVE-2007-3255 affects Xythos Enterprise Document Manager (XEDM) and related products. Vulnerabilities allow remote authenticated users to perform actions as other users via CSRF: (1) a saved Workflow name and (2) Content-Type header manipulation. Affects XEDM <5.0.25.8 and 6.x