
CVE-2007-2032
https://notcve.org/view.php?id=CVE-2007-2032
16 Apr 2007 — Cisco Wireless Control System (WCS) before 4.0.96.0 has a hard-coded FTP username and password for backup operations, which allows remote attackers to read and modify arbitrary files via unspecified vectors related to "properties of the FTP server," aka Bug ID CSCse93014. Cisco Wireless Control System (WCS) anterior a 4.0.96.0 tiene el nombre de usuario y la contraseña fija en el código para operaciones de backup, lo cual permite a atacantes remotos leer y modificar archivos de su elección mediante vectores... • http://secunia.com/advisories/24865 •

CVE-2007-2033
https://notcve.org/view.php?id=CVE-2007-2033
16 Apr 2007 — Unspecified vulnerability in Cisco Wireless Control System (WCS) before 4.0.81.0 allows remote authenticated users to read any configuration page by changing the group membership of user accounts, aka Bug ID CSCse78596. Vulnerabilidad no especificada en Cisco Wireless Control System (WCS) anterior a 4.0.81.0 permite a usuarios autenticados remotamente leer cualquier página de configuración cambiando la pertenencia a grupos de las cuentas de usuario, también conocido como Bug ID CSCse78596. • http://secunia.com/advisories/24865 •

CVE-2007-2034
https://notcve.org/view.php?id=CVE-2007-2034
16 Apr 2007 — Unspecified vulnerability in Cisco Wireless Control System (WCS) before 4.0.87.0 allows remote authenticated users to gain the privileges of the SuperUsers group, and manage the application and its networks, related to the group membership of user accounts, aka Bug ID CSCsg05190. Una vulnerabilidad no especificada en Cisco Wireless Control System (WCS) versiones anteriores a 4.0.87.0. permite a usuarios remotos autenticados alcanzar privilegios del grupo SuperUsers y administrar la aplicación y sus redes, r... • http://secunia.com/advisories/24865 •

CVE-2007-2035
https://notcve.org/view.php?id=CVE-2007-2035
16 Apr 2007 — Cisco Wireless Control System (WCS) before 4.0.66.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain network organization data via a direct request for files in certain directories, aka Bug ID CSCsg04301. cisco Wireless Control System (WCS) anterior a 4.0.66.0 almacena información sensible bajo el raíz del web con control de acceso insuficiente, lo cual permite a atacantes remotos obtener datos de la organización de la erd mediante una... • http://secunia.com/advisories/24865 •

CVE-2007-1467
https://notcve.org/view.php?id=CVE-2007-1467
16 Mar 2007 — Multiple cross-site scripting (XSS) vulnerabilities in (1) PreSearch.html and (2) PreSearch.class in Cisco Secure Access Control Server (ACS), VPN Client, Unified Personal Communicator, MeetingPlace, Unified MeetingPlace, Unified MeetingPlace Express, CallManager, IP Communicator, Unified Video Advantage, Unified Videoconferencing 35xx products, Unified Videoconferencing Manager, WAN Manager, Security Device Manager, Network Analysis Module (NAM), CiscoWorks and related products, Wireless LAN Solution Engin... • http://secunia.com/advisories/24499 •

CVE-2006-3287
https://notcve.org/view.php?id=CVE-2006-3287
28 Jun 2006 — Cisco Wireless Control System (WCS) for Linux and Windows 4.0(1) and earlier uses a default administrator username "root" and password "public," which allows remote attackers to gain access (aka bug CSCse21391). Cisco Wireless Control System (WCS) para Linux y Windows en sus versiones anteriores a la v4.0(1) usa el nombre de usuario administrador por defecto "root" y la contraseña "public," lo que permite a atacantes remotos obtener acceso (también conocido como bug CSCse21391). • http://secunia.com/advisories/20870 •