CVE-2007-2832

Cross-site scripting (XSS) vulnerability in the web application firewall in Cisco CallManager before 3.3(5)sr3, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before 4.3(1)sr1 allows remote attackers to inject arbitrary web script or HTML via the pattern parameter to CCMAdmin/serverlist.asp (aka the search-form) and possibly other unspecified vectors.

• http://marc.info/?l=full-disclosure&m=117993122727006&w=2Exploit, Vendor Advisory
• http://secunia.com/advisories/25377Patch, Vendor Advisory
• http://www.cisco.com/en/US/products/products_security_response09186a0080849272.html
• http://www.osvdb.org/35337
• http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2977
• http://www.securityfocus.com/bid/24119
• http://www.securitytracker.com/id?1018105
• http://www.vupen.com/english/advisories/2007/1922
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34465
• http://marc.info/?l=full-disclosure&m=117993122727006&w=2Exploit, Vendor Advisory
• http://secunia.com/advisories/25377Patch, Vendor Advisory
• http://www.cisco.com/en/US/products/products_security_response09186a0080849272.html
• http://www.osvdb.org/35337
• http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2977
• http://www.securityfocus.com/bid/24119
• http://www.securitytracker.com/id?1018105
• http://www.vupen.com/english/advisories/2007/1922
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34465

Published

May 24, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-2826PHP remote file inclusion vulnerability in lib/addressbook.p…
• CVE-2007-2827Heap-based buffer overflow in LEAD Technologies LEADTOOLS IS…
• CVE-2007-2828Cross-site request forgery (CSRF) vulnerability in adsense-d…
• CVE-2007-2829The 802.11 network stack in net80211/ieee80211_input.c in Ma…
• CVE-2007-2830The ath_beacon_config function in if_ath.c in MadWifi before…
• CVE-2007-2831Array index error in the (1) ieee80211_ioctl_getwmmparams an…
• CVE-2007-2833Emacs 21 allows user-assisted attackers to cause a denial of…
• CVE-2007-2834Integer overflow in the TIFF parser in OpenOffice.org (OOo) …
• CVE-2007-2835Multiple stack-based buffer overflows in (1) CCE_pinyin.c an…
• CVE-2007-2836Directory traversal vulnerability in session.rb in Hiki 0.8.…
• CVE-2007-2837The (1) getRule and (2) getChains functions in server/rules.…
• CVE-2007-2838The populate_conns function in src/populate_conns.c in GSAMB…