CVE-2007-1991

Cross-site scripting XSS vulnerability in mail/signup.asp in CmailServer WebMail 5.4.3, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the Comment parameter, a different vector than CVE-2007-1927...

CVE-2007-1991

CVE-2007-1991 is an XSS vulnerability affecting CmailServer WebMail 5.4.3 (and possibly earlier) in the mail/signup.asp path. The issue allows remote attackers to inject arbitrary web script or HTML via the Comment parameter (a vector distinct from CVE-2007-1927). Public references confirm the sa...

CVE-2007-1991

Cross-site scripting XSS vulnerability in mail/signup.asp in CmailServer WebMail 5.4.3, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the Comment parameter, a different vector than CVE-2007-1927...

CVE-2007-1991: Undefined Security Weakness

Cross-site scripting XSS vulnerability in mail/signup.asp in CmailServer WebMail 5.4.3, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the Comment parameter, a different vector than CVE-2007-1927...

Cross site scripting

Cross-site scripting XSS vulnerability in signup.asp in CmailServer WebMail 5.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the POP3Mail parameter...

CVE-2007-1927

Cross-site scripting XSS vulnerability in signup.asp in CmailServer WebMail 5.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the POP3Mail parameter...

CVE-2007-1927

Cross-site scripting XSS vulnerability in signup.asp in CmailServer WebMail 5.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the POP3Mail parameter...

CVE-2007-1927

The provided documents confirm a concrete XSS vulnerability: CVE-2007-1927 affects CmailServer WebMail 5.3.4 and earlier, where arbitrary web script/HTML can be injected via the POP3Mail parameter in signup.asp. Connected records also reference CVE-2007-1991 (a related XSS in mail/signup.asp via ...

Unfixed XSS vulnerability at www.immobilandia.it

Security researcher www.nullcode.com.ar, has submitted on 04/10/2007 a cross-site-scripting XSS vulnerability affecting www.immobilandia.it, which at the time of submission ranked 7122641 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at www.windns.com.br

Security researcher www.nullcode.com.ar, has submitted on 04/10/2007 a cross-site-scripting XSS vulnerability affecting www.windns.com.br, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/10/2007. It i...

Unfixed XSS vulnerability at mksgrudziadz.pl

Security researcher www.nullcode.com.ar, has submitted on 04/10/2007 a cross-site-scripting XSS vulnerability affecting mksgrudziadz.pl, which at the time of submission ranked 6347772 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/10/2007. ...

Unfixed XSS vulnerability at paladubon.org

Security researcher www.nullcode.com.ar, has submitted on 04/10/2007 a cross-site-scripting XSS vulnerability affecting paladubon.org, which at the time of submission ranked 3332170 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/10/2007. It...

Unfixed XSS vulnerability at ucsdakpsi.com

Security researcher www.nullcode.com.ar, has submitted on 04/10/2007 a cross-site-scripting XSS vulnerability affecting ucsdakpsi.com, which at the time of submission ranked 9239521 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/10/2007. It...

Unfixed XSS vulnerability at webmail.dnsgeral.com.br

Security researcher www.nullcode.com.ar, has submitted on 04/10/2007 a cross-site-scripting XSS vulnerability affecting webmail.dnsgeral.com.br, which at the time of submission ranked 296597 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at www.veclisesi.k12.tr

Security researcher www.nullcode.com.ar, has submitted on 04/10/2007 a cross-site-scripting XSS vulnerability affecting www.veclisesi.k12.tr, which at the time of submission ranked 4058521 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at www.alternativasistemas.com.br

Security researcher www.nullcode.com.ar, has submitted on 04/10/2007 a cross-site-scripting XSS vulnerability affecting www.alternativasistemas.com.br, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at www.porti.co.il

Security researcher www.nullcode.com.ar, has submitted on 04/10/2007 a cross-site-scripting XSS vulnerability affecting www.porti.co.il, which at the time of submission ranked 1090846 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/10/2007. ...

Unfixed XSS vulnerability at www.gradient.biz

Security researcher www.nullcode.com.ar, has submitted on 04/10/2007 a cross-site-scripting XSS vulnerability affecting www.gradient.biz, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/10/2007. It is...

Unfixed XSS vulnerability at panel.keal.k12.tr

Security researcher www.nullcode.com.ar, has submitted on 04/10/2007 a cross-site-scripting XSS vulnerability affecting panel.keal.k12.tr, which at the time of submission ranked 1500978 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/10/2007...

Unfixed XSS vulnerability at www.atea9.com

Security researcher www.nullcode.com.ar, has submitted on 04/10/2007 a cross-site-scripting XSS vulnerability affecting www.atea9.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/10/2007. It is...