CVE-2007-2591

Published: May 11, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

usrmgr/userList.asp in Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allows remote attackers to modify user account details and cause a denial of service (account deactivation) via the userid parameter in an update action.

Affected (5)

Products: Nokia: Groupwise Mobile Server, Intellisync Mobile Suite, Intellisync Wireless Email Express

Nokia

3 products

Groupwise Mobile Server

Intellisync Mobile Suite

Intellisync Wireless Email Express

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Nokia Groupwise Mobile Server	All versions
Nokia Intellisync Mobile Suite	Version 6.4.31.2
Nokia Intellisync Mobile Suite	Version 6.6.0.107
Nokia Intellisync Mobile Suite	Version 6.6.2.2
Nokia Intellisync Wireless Email Express	All versions