CVE-2006-5712
UnknownEPSS 1.60%
Last modified
CVE-2006-5712 is a vulnerability of currently unknown severity. Cross-site scripting (XSS) vulnerability in Mirapoint WebMail allows remote attackers to inject arbitrary web script via the expression Cascading Style Sheets (CSS) function, as demonstrated using the width style for an IMG element.. EPSS estimates a 1.60% chance of exploitation in the next 30 days.
Description
Cross-site scripting (XSS) vulnerability in Mirapoint WebMail allows remote attackers to inject arbitrary web script via the expression Cascading Style Sheets (CSS) function, as demonstrated using the width style for an IMG element.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Mirapoint | Mirapoint Webmail | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-5712?
Cross-site scripting (XSS) vulnerability in Mirapoint WebMail allows remote attackers to inject arbitrary web script via the expression Cascading Style Sheets (CSS) function, as demonstrated using the width style for an IMG element.
How severe is CVE-2006-5712?
Severity scoring for CVE-2006-5712 is pending analysis. The EPSS model estimates a 1.60% probability of exploitation in the next 30 days.
How do I fix CVE-2006-5712?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2006
- CVE-2006-5706Unspecified vulnerabilities in PHP, probably before 5.2.0, a…
- CVE-2006-5707SQL injection vulnerability in index.php in PHPEasyData Pro …
- CVE-2006-5708Multiple unspecified vulnerabilities in MDaemon and WorldCli…7.5
- CVE-2006-5709Unspecified vulnerability in WorldClient in Alt-N Technologi…
- CVE-2006-5710The Airport driver for certain Orinoco based Airport cards i…
- CVE-2006-5711ECI Telecom B-FOCuS Wireless 802.11b/g ADSL2+ Router allows …
- CVE-2006-5713Cross-site scripting (XSS) vulnerability in Easy File Sharin…
- CVE-2006-5714Easy File Sharing (EFS) Web Server 4.0, when running on an N…
- CVE-2006-5715Easy File Sharing (EFS) Easy Address Book 1.2, when run on a…
- CVE-2006-5716Directory traversal vulnerability in aff_news.php in FreeNew…
- CVE-2006-5717Multiple cross-site scripting (XSS) vulnerabilities in Zend …
- CVE-2006-5718Cross-site scripting (XSS) vulnerability in error.php in php…
Are you affected by CVE-2006-5712?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST