CVE-2011-0552: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the management console in Symantec IM Manager before 8.4.18 allow remote attackers to inject arbitrary web script or HTML via the 1 refreshRateSetting parameter to IMManager/Admin/IMAdminSystemDashboard.asp, the 2 nav or 3 menuitem parameter to...

PT-2011-2440

Name of the Vulnerable Software and Affected Versions Symantec IM Manager versions prior to 8.4.18 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the management console. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via...