CVE-2005-3014

CVE-2005-3014 describes a cross-site scripting (XSS) vulnerability in Ensim WEBppliance where input in the ocw_login_username field is not sanitized before being used in dynamically generated pages. This allows remote attackers to inject arbitrary web script/HTML. The root cause is insufficient i...

CVE-2002-2344

The CVE-2002-2344 issue affects Ensim WEBppliance 3.0 and 3.1, where remote attackers can read mail intended for other users by creating an alias that targets another user’s email address. The underlying vulnerability is a misconfiguration/validation flaw in alias handling that permits access to ...