4 matches found
CVE-2007-1927
Cross-site scripting XSS vulnerability in signup.asp in CmailServer WebMail 5.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the POP3Mail parameter...
4.3CVSS5.6AI score0.01217EPSS
SaveExploits0References6
Cross site scripting
Cross-site scripting XSS vulnerability in signup.asp in CmailServer WebMail 5.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the POP3Mail parameter...
4.3CVSS6AI score0.01217EPSS
SaveExploits0References6Affected Software1
CVE-2007-1927
The provided documents confirm a concrete XSS vulnerability: CVE-2007-1927 affects CmailServer WebMail 5.3.4 and earlier, where arbitrary web script/HTML can be injected via the POP3Mail parameter in signup.asp. Connected records also reference CVE-2007-1991 (a related XSS in mail/signup.asp via ...
4.3CVSS5.7AI score0.01217EPSS
SaveExploits0References6Affected Software1
20