CVEvulnerability
CVE-2007-5251
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-10-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-352
Description
Multiple cross-site scripting (XSS) vulnerabilities in Helm 3.2.16 allow remote attackers to inject arbitrary web script or HTML via (1) the showOption parameter to domain.asp, or the (2) Folder or (3) StartPath parameter to FileManager.asp.
Affected configurations
• webhost automation helm web hosting control panel 3.2.16
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://pridels-team.blogspot.com/2007/10/helm-xss-vuln.html pridels-team.blogspot.com
- http://secunia.com/advisories/27080 secunia.com
- http://www.securityfocus.com/bid/25940 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36962 exchange.xforce.ibmcloud.com
- http://pridels-team.blogspot.com/2007/10/helm-xss-vuln.html pridels-team.blogspot.com
- http://secunia.com/advisories/27080 secunia.com
- http://www.securityfocus.com/bid/25940 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36962 exchange.xforce.ibmcloud.com