Eroom

eroom

Vendor: Emc • 2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2005-2185 1Emc 1Eroom Apr 16, 2026 Jul 11, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 eRoom does not set an expiration for Cookies, which allows remote attackers to capture cookies and conduct replay attacks.
CVE-2005-2184 1Emc 1Eroom Apr 16, 2026 Jul 11, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 eRoom 6.x does not properly restrict files that can be attached, which allows remote attackers to execute arbitrary commands via a .lnk file.