Home
Bugtraq
Full List
Only Bugs
Only Tricks
Only Exploits
Only Dorks
Only CVE
Only CWE
Fake Notes
Ranking
CVEMAP
Full List
Show Vendors
Show Products
CWE Dictionary
Check CVE Id
Check CWE Id
Search
Bugtraq
CVEMAP
By author
CVE Id
CWE Id
By vendors
By products
RSS
Bugtraq
CVEMAP
CVE Products
Bugs
Exploits
Dorks
More
cIFrex
Facebook
Twitter
Donate
About
Submit
Vulnerabilities for
'Personal email manager'
2009-10-22
CVE-2009-3749
CWE-Other
The Web Administrator service (STEMWADM.EXE) in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4 allows remote attackers to cause a denial of service (crash) by sending a HTTP GET request to TCP port 8181 and closing the socket before the service can send a response.
CVE-2009-3748
CWE-79
Multiple cross-site scripting (XSS) vulnerabilities in the Web Administrator in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4 allow remote attackers to inject arbitrary web script or HTML via the (1) FileName, (2) IsolatedMessageID, (3) ServerName, (4) Dictionary, (5) Scoring, and (6) MessagePart parameters to web/msgList/viewmsg/actions/msgAnalyse.asp; the (7) Queue, (8) FileName, (9) IsolatedMessageID, and (10) ServerName parameters to actions/msgForwardToRiskFilter.asp and viewHeaders.asp in web/msgList/viewmsg/; and (11) the subject in an e-mail message that is held in a Queue.
>>>
Vendor:
Websense
25
Products
Websense
Enterprise
Web security suite
Enterpise
Reporting tools
Personal email manager
Websense email security
Email security
Websense web filter
Websense web security
Websense web security gateway
Websense web security gateway anywhere
Websense content content gateway
Websense v10000
Triton unified security center
Triton web filter
Triton web security
Triton web security gateway
Triton web security gateway anywhere
Triton ap web
Triton ap data
Triton ap email
V-series appliances
Triton
Content gateway
Copyright
2024
, cxsecurity.com
Back to Top
Vulnerabilities for 'Personal email manager' 