CVE-2006-1407

CVE-2006-1407 concerns multiple cross-site scripting (XSS) flaws in Helm Web Hosting Control Panel 3.2.10 and earlier. The affected components are domains.asp (txtDomainName) and default.asp (SearchText, UserLevel) where user-controlled inputs can inject arbitrary script/HTML. The practical impac...

CVE-2006-5984

Helm Web Hosting Control Panel 3.2.10 is affected by CVE-2006-5984: multiple XSS weaknesses in the Admin, Reseller, and User levels. The vectors include user input in (1) txtCompanyName, (2) txtEmail, (3) txtUserAccNum to users.asp; (4) setThemeColour to default.asp (Reseller/Admin) and (5) setTh...

CVE-2007-5251

CVE-2007-5251: Multiple cross-site scripting (XSS) vulnerabilities in Helm 3.2.16. The XSS vectors affect the web interface via the showOption parameter to domain.asp and the Folder or StartPath parameters to FileManager.asp. Affected component: Helm 3.2.16 web UI. Exploitation details/impact are...