CVE-2008-0971

https://notcve.org/view.php?id=CVE-2008-0971

19 Dec 2008 — Multiple cross-site scripting (XSS) vulnerabilities in index.cgi in Barracuda Spam Firewall (BSF) before 3.5.12.007, Message Archiver before 1.2.1.002, Web Filter before 3.3.0.052, IM Firewall before 3.1.01.017, and Load Balancer before 2.3.024 allow remote attackers to inject arbitrary web script or HTML via (1) the Policy Name field in Search Based Retention Policy in Message Archiver; unspecified parameters in the (2) IP Configuration, (3) Administration, (4) Journal Accounts, (5) Retention Policy, and (... • http://dcsl.ul.ie/advisories/03.htm • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •