CVE-2007-5581

Cisco Unified MeetingPlace < 5.4 - Cross-Site Scripting via FirstName or LastName Parameters

Title source: llm
STIX 2.1

Description

Multiple cross-site scripting (XSS) vulnerabilities in mpweb/scripts/mpx.dll in Cisco Unified MeetingPlace 5.4 and earlier and 6.0 allow remote attackers to inject arbitrary web script or HTML via the (1) FirstName and (2) LastName parameters.

References (6)

Core 6
Core References
Vendor Advisory vendor-advisory x_refsource_cisco
http://www.cisco.com/warp/public/707/cisco-sr-20071107-mp.shtml
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/26462
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1018904
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/26364
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/38298
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/3772

Scores

EPSS 0.0122
EPSS Percentile 65.6%

Details

CWE
CWE-79
Status published
Products (8)
cisco/unified_meetingplace 4.3.0.246
cisco/unified_meetingplace 4.3.0.246.5
cisco/unified_meetingplace 5
cisco/unified_meetingplace 5.0
cisco/unified_meetingplace 5.2
cisco/unified_meetingplace 5.3
cisco/unified_meetingplace 6.0
cisco/unified_meetingplace < 5.4
Published Nov 08, 2007
Tracked Since Feb 18, 2026