Page 6 of 53 results (0.039 seconds)

CVSS: 6.1EPSS: 7%CPEs: 1EXPL: 5

CVE-2007-6321 – Roundcube Webmail 0.1 - CSS Expression Input Validation

https://notcve.org/view.php?id=CVE-2007-6321

12 Dec 2007 — Cross-site scripting (XSS) vulnerability in RoundCube webmail 0.1rc2, 2007-12-09, and earlier versions, when using Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via style sheets containing expression commands. Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en RoundCube webmail 0.1rc2, 2007-12-09, y versiones anteriores, cuando utiliza Internet Explorer, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de expresión que conti... • https://www.exploit-db.com/exploits/30877 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 31EXPL: 0

CVE-2005-1819

https://notcve.org/view.php?id=CVE-2005-1819

01 Jun 2005 — Cross-site scripting (XSS) vulnerability in NikoSoft WebMail before 0.11.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. • http://secunia.com/advisories/15518 •

CVSS: 7.5EPSS: 7%CPEs: 1EXPL: 1

CVE-2001-0857 – Horde IMP 2.2.x - Session Hijacking

https://notcve.org/view.php?id=CVE-2001-0857

06 Dec 2001 — Cross-site scripting vulnerability in status.php3 in Imp Webmail 2.2.6 and earlier allows remote attackers to gain access to the e-mail of other users by hijacking session cookies via the message parameter. • https://www.exploit-db.com/exploits/21151 •