CVE-2011-0552: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the management console in Symantec IM Manager before 8.4.18 allow remote attackers to inject arbitrary web script or HTML via the 1 refreshRateSetting parameter to IMManager/Admin/IMAdminSystemDashboard.asp, the 2 nav or 3 menuitem parameter to...