CVE-2007-0651

Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Professional before 2.37 allow remote attackers to inject arbitrary Javascript script via (1)…

published February 15, 2007

CVSS
—
EPSS
3%
Percentile
87.7
In the wild
Unconfirmed
What it is

Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Professional before 2.37 allow remote attackers to inject arbitrary Javascript script via (1) e-mail messages and (2) the ID parameter to (a) right.asp, (b) Forms/MAI/list.asp, and (c) Forms/VCF/list.asp in mewebmail/base/default/lang/EN/.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03101 · 87.7th percentile
Published
2007-02-15T23:00Z
EPSS history
Timeline
  • 15 FEB 23:00Z
    Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Professional before 2.37 allow remote attackers to inject arbitrary Javascript script via (1)…
    cvelistv5