CVE-2007-2592

Published: May 11, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter to de/pda/dev_logon.asp and (2) multiple unspecified vectors in (a) usrmgr/registerAccount.asp, (b) de/create_account.asp, and other files.

Affected (5)

Products: Nokia: Groupwise Mobile Server, Intellisync Mobile Suite, Intellisync Wireless Email Express

3 products

Groupwise Mobile Server

Intellisync Mobile Suite

Intellisync Wireless Email Express

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Nokia Groupwise Mobile Server	All versions
Nokia Intellisync Mobile Suite	Version 6.4.31.2
Nokia Intellisync Mobile Suite	Version 6.6.0.107
Nokia Intellisync Mobile Suite	Version 6.6.2.2
Nokia Intellisync Wireless Email Express	All versions

References (28)

http://osvdb.org/34515

Source: cve@mitre.org

http://osvdb.org/34516

Source: cve@mitre.org

http://osvdb.org/34517

Source: cve@mitre.org

http://secunia.com/advisories/25212

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/26199

Source: cve@mitre.org

http://securityreason.com/securityalert/2689

Source: cve@mitre.org

http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5005120.html

Source: cve@mitre.org

http://www.sec-consult.com/289.html

Source: cve@mitre.org

ExploitVendor Advisory

http://www.securityfocus.com/archive/1/468048/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/23889

Source: cve@mitre.org

http://www.securitytracker.com/id?1018454

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/1727

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/2657

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/34187

Source: cve@mitre.org

http://osvdb.org/34515

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/34516

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/34517

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/25212

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/26199

Source: af854a3a-2127-422b-91ae-364da2661108

http://securityreason.com/securityalert/2689

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5005120.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.sec-consult.com/289.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://www.securityfocus.com/archive/1/468048/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/23889

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1018454

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/1727

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/2657

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/34187

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.