CVE-2005-1756

Novell NetMail < 3.52C - Cross-Site Scripting via Calendar Display Fields

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in the ModWeb agent for Novell NetMail 3.52 before 3.52C allows remote attackers to inject arbitrary web script or HTML via calendar display fields.

References (8)

Core 8
Core References
Patch, Vendor Advisory x_refsource_confirm
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971588.htm
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2005/0727
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/17240
Patch, Vendor Advisory x_refsource_confirm
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971590.htm
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/15644
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/13926
Patch, Vendor Advisory x_refsource_confirm
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971591.htm

Scores

EPSS 0.0088
EPSS Percentile 75.7%

Details

Status published
Products (4)
novell/netmail 3.0.3a a (2 CPE variants)
novell/netmail 3.1 (2 CPE variants)
novell/netmail 3.5.2 a (3 CPE variants)
novell/netmail 3.10 (9 CPE variants)
Published Jun 08, 2005
Tracked Since Feb 18, 2026