CVE-2007-2592

Multiple cross-site scripting (XSS) vulnerabilities in Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter to de/pda/dev_logon.asp and (2) multiple unspecified vectors in (a) usrmgr/registerAccount.asp, (b) de/create_account.asp, and other files.

• http://osvdb.org/34515
• http://osvdb.org/34516
• http://osvdb.org/34517
• http://secunia.com/advisories/25212Patch, Vendor Advisory
• http://secunia.com/advisories/26199
• http://securityreason.com/securityalert/2689
• http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5005120.html
• http://www.sec-consult.com/289.htmlExploit, Vendor Advisory
• http://www.securityfocus.com/archive/1/468048/100/0/threaded
• http://www.securityfocus.com/bid/23889
• http://www.securitytracker.com/id?1018454
• http://www.vupen.com/english/advisories/2007/1727
• http://www.vupen.com/english/advisories/2007/2657
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34187
• http://osvdb.org/34515
• http://osvdb.org/34516
• http://osvdb.org/34517
• http://secunia.com/advisories/25212Patch, Vendor Advisory
• http://secunia.com/advisories/26199
• http://securityreason.com/securityalert/2689
• http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5005120.html
• http://www.sec-consult.com/289.htmlExploit, Vendor Advisory
• http://www.securityfocus.com/archive/1/468048/100/0/threaded
• http://www.securityfocus.com/bid/23889
• http://www.securitytracker.com/id?1018454
• http://www.vupen.com/english/advisories/2007/1727
• http://www.vupen.com/english/advisories/2007/2657
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34187

Published

May 11, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-2586The FTP Server in Cisco IOS 11.3 through 12.4 does not prope…
• CVE-2007-2587The IOS FTP Server in Cisco IOS 11.3 through 12.4 allows rem…
• CVE-2007-2588Multiple buffer overflows in the Office Viewer OCX ActiveX c…
• CVE-2007-2589Cross-site request forgery (CSRF) vulnerability in compose.p…
• CVE-2007-2590Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.…
• CVE-2007-2591usrmgr/userList.asp in Nokia Intellisync Mobile Suite 6.4.31…
• CVE-2007-2593The Terminal Server in Microsoft Windows 2003 Server, when u…
• CVE-2007-2594PHP remote file inclusion vulnerability in inc/articles.inc.…
• CVE-2007-2595RSAuction 2.73.1.3 allows remote authenticated users to move…
• CVE-2007-2596PHP remote file inclusion vulnerability in common/func.php i…
• CVE-2007-2597Multiple PHP remote file inclusion vulnerabilities in tellta…
• CVE-2007-2598SQL injection vulnerability in print.php in SimpleNews 1.0.0…