150 matches found
CVE-2006-1508
Multiple cross-site scripting XSS vulnerabilities in MH Software Connect Daily Web Calendar Software 3.2.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 calendarid, 2 stylesheet, and 3 start parameters in a ViewDay.html; the 4 txtSearch and 5 opgSearch...
CVE-2006-1508
CVE-2006-1508 affects MH Software Connect Daily Web Calendar Software (version 3.2.9 and earlier). The vulnerability is multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary script or HTML via various query parameters across multiple pages: calendar_id, style_s...
CVE-2006-1508: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in MH Software Connect Daily Web Calendar Software 3.2.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 calendarid, 2 stylesheet, and 3 start parameters in a ViewDay.html; the 4 txtSearch and 5 opgSearch...
CVE-2002-1128
Buffer overflow in inc mail utility for Compaq Tru64/OSF1 3.x allows local users to execute arbitrary code via a long MH environment variable...
CVE-2002-1128: Undefined Security Weakness
Buffer overflow in inc mail utility for Compaq Tru64/OSF1 3.x allows local users to execute arbitrary code via a long MH environment variable...
Digital Unix msgchk vulnerable to file contents disclosure via symlink redirection of profile
Overview msgchk, a part of the MH mail system, reads the user's .mhprofile in order to obtain configuration options. If the .mhprofile is linked to another file with illegal format, the first line of that file will be displayed in an error message by msgchk. Description msgchk is the portion of t...
CVE-1999-0358
Digital Unix 4.0 has a buffer overflow in the inc program of the mh package...
CVE-1999-0358
Summary: CVE-1999-0358 affects Digital Unix 4.0 with a buffer overflow in the inc program of the mh package. The connected documents (e.g., Red Hat CVE entry and related records) reiterate the same description without providing concrete exploit details, affected version ranges beyond Digital Unix...