CVE-2007-1467

Published: Mar 16, 2007Modified: Apr 23, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in (1) PreSearch.html and (2) PreSearch.class in Cisco Secure Access Control Server (ACS), VPN Client, Unified Personal Communicator, MeetingPlace, Unified MeetingPlace, Unified MeetingPlace Express, CallManager, IP Communicator, Unified Video Advantage, Unified Videoconferencing 35xx products, Unified Videoconferencing Manager, WAN Manager, Security Device Manager, Network Analysis Module (NAM), CiscoWorks and related products, Wireless LAN Solution Engine (WLSE), 2006 Wireless LAN Controllers (WLC), and Wireless Control System (WCS) allow remote attackers to inject arbitrary web script or HTML via the text field of the search form.

Affected (40)

Products: Cisco: Acs Solution Engine, Call Manager, Ciscoworks, Ip Communicator, Meetingplace, Network Analysis Module, Security Device Manager, Unified Meetingplace, Unified Meetingplace Express, Unified Personal Communicator, Unified Video Advantage, Unified Videoconferencing, Unified Videoconferencing Manager, Vpn Client, Wan Manager, Wireless Control System, Wireless Lan Controllers, Wireless Lan Solution Engine

18 products

Network Analysis Module

Security Device Manager

Unified Meetingplace

Unified Meetingplace Express

Unified Personal Communicator

Unified Video Advantage

Unified Videoconferencing

Unified Videoconferencing Manager

Vpn Client

Wan Manager

Wireless Control System

Wireless Lan Controllers

Wireless Lan Solution Engine

Configuration A

40 vulnerable

Vulnerable Software	Affected Versions
Cisco Acs Solution Engine	Version 4.1
Cisco Acs Solution Engine	Version 4.1
Cisco Call Manager	All versions
Cisco Ciscoworks	All versions
Cisco Ip Communicator	All versions
Cisco Meetingplace	All versions
Cisco Network Analysis Module	All versions
Cisco Security Device Manager	All versions
Cisco Unified Meetingplace	All versions
Cisco Unified Meetingplace Express	All versions
Cisco Unified Personal Communicator	All versions
Cisco Unified Video Advantage	All versions
Cisco Unified Videoconferencing	All versions
Cisco Unified Videoconferencing Manager	All versions
Cisco Vpn Client	Version 3.5.1
Cisco Vpn Client	Version 3.5.1
Cisco Vpn Client	Version 3.5.2
Cisco Vpn Client	Version 3.5.2
Cisco Vpn Client	Version 3.5.2
Cisco Vpn Client	Version 3.5.2b
Cisco Vpn Client	Version 3.5.2b
Cisco Vpn Client	Version 3.5.2b
Cisco Vpn Client	Version 3.5.4
Cisco Vpn Client	Version 3.5.4
Cisco Vpn Client	Version 3.5.4
Cisco Vpn Client	Version 3.6.1
Cisco Vpn Client	Version 3.6.1
Cisco Vpn Client	Version 3.6.1
Cisco Vpn Client	Version 3.6
Cisco Vpn Client	Version 3.6
Cisco Vpn Client	Version 3.6
Cisco Vpn Client	Version 4.0.2a
Cisco Vpn Client	Version 4.0.2a
Cisco Vpn Client	Version 4.0.2c
Cisco Vpn Client	Version 4.0.2c
Cisco Vpn Client	Version 4.8.1
Cisco Wan Manager	All versions
Cisco Wireless Control System	Version 4.0
Cisco Wireless Lan Controllers	All versions
Cisco Wireless Lan Solution Engine	All versions