CVE-2007-2591

usrmgr/userList.asp in Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allows remote attackers to modify user account details and cause a denial of service (account deactivation) via the userid parameter in an update action.

• http://osvdb.org/34513
• http://secunia.com/advisories/25212Patch, Vendor Advisory
• http://securityreason.com/securityalert/2689
• http://www.sec-consult.com/289.htmlExploit, Vendor Advisory
• http://www.securityfocus.com/archive/1/468048/100/0/threaded
• http://www.vupen.com/english/advisories/2007/1727
• http://osvdb.org/34513
• http://secunia.com/advisories/25212Patch, Vendor Advisory
• http://securityreason.com/securityalert/2689
• http://www.sec-consult.com/289.htmlExploit, Vendor Advisory
• http://www.securityfocus.com/archive/1/468048/100/0/threaded
• http://www.vupen.com/english/advisories/2007/1727

Published

May 11, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-2585Stack-based buffer overflow in the Verify function in the Ba…
• CVE-2007-2586The FTP Server in Cisco IOS 11.3 through 12.4 does not prope…
• CVE-2007-2587The IOS FTP Server in Cisco IOS 11.3 through 12.4 allows rem…
• CVE-2007-2588Multiple buffer overflows in the Office Viewer OCX ActiveX c…
• CVE-2007-2589Cross-site request forgery (CSRF) vulnerability in compose.p…
• CVE-2007-2590Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.…
• CVE-2007-2592Multiple cross-site scripting (XSS) vulnerabilities in Nokia…
• CVE-2007-2593The Terminal Server in Microsoft Windows 2003 Server, when u…
• CVE-2007-2594PHP remote file inclusion vulnerability in inc/articles.inc.…
• CVE-2007-2595RSAuction 2.73.1.3 allows remote authenticated users to move…
• CVE-2007-2596PHP remote file inclusion vulnerability in common/func.php i…
• CVE-2007-2597Multiple PHP remote file inclusion vulnerabilities in tellta…