CVE-2007-0651

Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Professional before 2.37 allow remote attackers to inject arbitrary Javascript script via (1) e-mail messages and (2) the ID parameter to (a) right.asp, (b) Forms/MAI/list.asp, and (c) Forms/VCF/list.asp in mewebmail/base/default/lang/EN/.

• mailenable mailenable professional 1.0.004 • mailenable mailenable professional 1.0.005 • mailenable mailenable professional 1.0.006 • mailenable mailenable professional 1.0.007 • mailenable mailenable professional 1.0.008 • mailenable mailenable professional 1.0.009 • mailenable mailenable professional 1.0.010 • mailenable mailenable professional 1.0.011 • mailenable mailenable professional 1.0.012 • mailenable mailenable professional 1.0.013 • mailenable mailenable professional 1.0.014 • mailenable mailenable professional 1.0.015 • mailenable mailenable professional 1.0.016 • mailenable mailenable professional 1.0.017 • mailenable mailenable professional 1.1 • mailenable mailenable professional 1.2 • mailenable mailenable professional 1.2a • mailenable mailenable professional 1.5 • mailenable mailenable professional 1.6 • mailenable mailenable professional 1.7 • mailenable mailenable professional 1.12 • mailenable mailenable professional 1.13 • mailenable mailenable professional 1.14 • mailenable mailenable professional 1.15 • mailenable mailenable professional 1.16 • mailenable mailenable professional 1.17 • mailenable mailenable professional 1.18 • mailenable mailenable professional 1.19 • mailenable mailenable professional 1.51 • mailenable mailenable professional 1.52 • mailenable mailenable professional 1.53 • mailenable mailenable professional 1.54 • mailenable mailenable professional 1.72 • mailenable mailenable professional 1.73 • mailenable mailenable professional 1.82 • mailenable mailenable professional 1.83 • mailenable mailenable professional 1.84 • mailenable mailenable professional 1.101 • mailenable mailenable professional 1.102 • mailenable mailenable professional 1.103 • mailenable mailenable professional 1.104 • mailenable mailenable professional 1.105 • mailenable mailenable professional 1.106 • mailenable mailenable professional 1.107 • mailenable mailenable professional 1.108 • mailenable mailenable professional 1.109 • mailenable mailenable professional 1.110 • mailenable mailenable professional 1.111 • mailenable mailenable professional 1.112 • mailenable mailenable professional 1.113 • mailenable mailenable professional 1.114 • mailenable mailenable professional 1.115 • mailenable mailenable professional 1.116 • mailenable mailenable professional 2.0 • mailenable mailenable professional 2.1 • mailenable mailenable professional 2.2 • mailenable mailenable professional 2.32 • mailenable mailenable professional 2.33 • mailenable mailenable professional 2.34 • mailenable mailenable professional 2.35 … and 1 more