| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2007-6597 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in IPortalX before Build 033 allow remote attackers to inject arbitrary web script or HTML via the (1) KW and (2) SF parameters to forum/login_user.asp, and (3) the Date parameter to blogs.asp.
|
14-02-2024 - 01:17 | 31-12-2007 - 19:46 | |
| CVE-2006-0978 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in the View Headers (aka viewheaders) functionality in ArGoSoft Mail Server Pro 1.8.8.5 allow remote attackers to inject arbitrary web script or HTML via (1) the Subject header, (2) the From header,
|
18-10-2018 - 16:30 | 03-03-2006 - 11:02 | |
| CVE-2006-4614 | 4.9 |
PDAapps Verichat for Pocket PC 1.30bh stores usernames and passwords in plaintext in the Windows Mobile registry, which allows local users to obtain sensitive information via keys under \HKEY_CURRENT_USER\Software\PDAapps\VeriChat.
|
17-10-2018 - 21:38 | 07-09-2006 - 00:04 | |
| CVE-2008-4725 | 4.3 |
Cross-site scripting (XSS) vulnerability in Opera.dll in Opera 9.52 allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly escaped before storage in the History Search database (aka md.dat), a diffe
|
11-10-2018 - 20:52 | 23-10-2008 - 22:00 | |
| CVE-2008-4696 | 4.3 |
Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary web script or HTML via the anchor identifier (aka the "optional fragment"), which is not properly escaped before storage in the His
|
11-10-2018 - 20:52 | 23-10-2008 - 22:00 | |
| CVE-2010-5000 | 7.5 |
SQL injection vulnerability in login/login_index.php in MCLogin System 1.1 and 1.2 allows remote attackers to execute arbitrary SQL commands via the myusername parameter (aka Username field) in a do_login action. NOTE: some of these details are obta
|
14-02-2012 - 04:02 | 02-11-2011 - 21:55 |