CVE-2007-2590

Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allows remote attackers to obtain user names and other sensitive information via a direct request to (1) usrmgr/userList.asp or (2) usrmgr/userStatusList.asp.

• CWE-200

• http://osvdb.org/34514
• http://secunia.com/advisories/25212Patch, Vendor Advisory
• http://securityreason.com/securityalert/2689
• http://www.sec-consult.com/289.htmlExploit, Vendor Advisory
• http://www.securityfocus.com/archive/1/468048/100/0/threaded
• http://www.vupen.com/english/advisories/2007/1727
• http://osvdb.org/34514
• http://secunia.com/advisories/25212Patch, Vendor Advisory
• http://securityreason.com/securityalert/2689
• http://www.sec-consult.com/289.htmlExploit, Vendor Advisory
• http://www.securityfocus.com/archive/1/468048/100/0/threaded
• http://www.vupen.com/english/advisories/2007/1727

Published

May 11, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-2584Buffer overflow in the IsOldAppInstalled function in the McS…
• CVE-2007-2585Stack-based buffer overflow in the Verify function in the Ba…
• CVE-2007-2586The FTP Server in Cisco IOS 11.3 through 12.4 does not prope…
• CVE-2007-2587The IOS FTP Server in Cisco IOS 11.3 through 12.4 allows rem…
• CVE-2007-2588Multiple buffer overflows in the Office Viewer OCX ActiveX c…
• CVE-2007-2589Cross-site request forgery (CSRF) vulnerability in compose.p…
• CVE-2007-2591usrmgr/userList.asp in Nokia Intellisync Mobile Suite 6.4.31…
• CVE-2007-2592Multiple cross-site scripting (XSS) vulnerabilities in Nokia…
• CVE-2007-2593The Terminal Server in Microsoft Windows 2003 Server, when u…
• CVE-2007-2594PHP remote file inclusion vulnerability in inc/articles.inc.…
• CVE-2007-2595RSAuction 2.73.1.3 allows remote authenticated users to move…
• CVE-2007-2596PHP remote file inclusion vulnerability in common/func.php i…