CVE-2004-1499

Published: Dec 31, 2004Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers to execute arbitrary web script or HTML via the Subject field.

Affected (10)

Products: Webhost Automation: Helm Control Panel

Webhost Automation

1 product

Helm Control Panel

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Webhost Automation Helm Control Panel	Version 3.1.10
Webhost Automation Helm Control Panel	Version 3.1.11
Webhost Automation Helm Control Panel	Version 3.1.12
Webhost Automation Helm Control Panel	Version 3.1.13
Webhost Automation Helm Control Panel	Version 3.1.14
Webhost Automation Helm Control Panel	Version 3.1.15
Webhost Automation Helm Control Panel	Version 3.1.16
Webhost Automation Helm Control Panel	Version 3.1.17
Webhost Automation Helm Control Panel	Version 3.1.18
Webhost Automation Helm Control Panel	Version 3.1.19