Unscored CVE-2007-1927 EUVD-2007-1921GHSA-xr7h-q8xq-c8ww

Cross-site scripting (XSS) vulnerability in signup.asp in CmailServer WebMail 5.3.4 and earlier allows remote attackers to inject arbitrary…

Published Apr 10, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in signup.asp in CmailServer WebMail 5.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the POP3Mail parameter.

References

cmailserver-signup-xss(33501) vdb-entry
2529 third-party-advisory
34119 vdb-entry
24812 third-party-advisory
23360 vdb-entry
20070407 CmailServer WebMail <= V.5.3.4 (signup) Remote XSS Exploit mailing-list