Mindalign Security Vulnerabilities

CVE-2005-2590

Cross-site scripting (XSS) vulnerability in Parlano MindAlign 5.0 and later versions allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

CVE-2005-2591

Parlano MindAlign 5.0 and later versions allows remote attackers to list valid users via unknown vectors, aka the "User Enumeration" vulnerability.

CVE-2005-2592

Unknown vulnerability in Parlano MindAlign 5.0 and later versions allows remote attackers to bypass authentication via unknown vectors.

CVE-2005-2593

Parlano MindAlign 5.0 and later versions uses weak encryption, with unknown impact and attack vectors.