CVE-2007-0651

Published Feb 15, 2007 CVSS 2.0 · 4.3 Medium EPSS 3.1% KEV · Not listed
Description
Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Professional before 2.37 allow remote attackers to inject arbitrary Javascript script via (1) e-mail messages and (2) the ID parameter to (a) right.asp, (b) Forms/MAI/list.asp, and (c) Forms/VCF/list.asp in mewebmail/base/default/lang/EN/.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2007-0649 Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Professional before 2.37 allow remote attackers to inject arbitrary Javascript script via (1) e-mail messages and (2) the ID parameter to (a) right.asp, (b) Forms/MAI/list.asp, and (c) Forms/VCF/list.asp in mewebmail/base/default/lang/EN/.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
flexera
Published
Updated
Aug 7, 2024, 12:26 PM
Reserved
Feb 1, 2007, 12:00 AM
Status
Modified
Published
Feb 15, 2007, 11:28 PM
Modified
Jun 16, 2026, 10:36 PM