CVE-1999-1167

MediumCVSS 6.4/10Last modified Jun 16, 2026

Description

Cross-site scripting vulnerability in Third Voice Web annotation utility allows remote users to read sensitive data and generate fake web pages for other Third Voice users by injecting malicious Javascript into an annotation.

Metrics

CVSS 2.0 6.4/10AV:N/AC:L/Au:N/C:P/I:P/A:N

Affected software

No affected versions have been published.

Timeline

Published: Dec 31, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-11687.2install.iss installation script for Internet Security Scanner (ISS) for Linux, version 5.3, allows local users to change the permissions of CVE-1999-11695.0nobo 1.2 allows remote attackers to cause a denial of service (crash) via a series of large UDP packets.CVE-1999-11704.6IPswitch IMail allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920.CVE-1999-11714.6IPswitch WS_FTP allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920 CVE-1999-11725.0By design, Maximizer Enterprise 4 calendar and address book program allows arbitrary users to modify the calendar of other users when the ca CVE-1999-11744.6ZIP drive for Iomega ZIP-100 disks allows attackers with physical access to the drive to bypass password protection by inserting a known dis CVE-1999-11757.5Web Cache Control Protocol (WCCP) in Cisco Cache Engine for Cisco IOS 11.2 and earlier does not use authentication, which allows remote atta CVE-1999-11775.0Directory traversal vulnerability in nph-publish before 1.2 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the p CVE-1999-11805.0O'Reilly WebSite 1.1e and Website Pro 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an argument to (CVE-1999-11897.5Buffer overflow in Netscape Navigator/Communicator 4.7 for Windows 95 and Windows 98 allows remote attackers to cause a denial of service, a CVE-1999-119010.0Buffer overflow in POP3 server of Admiral Systems EmailClub 1.05 allows remote attackers to execute arbitrary commands via a long "From" hea CVE-1999-11955.1NAI VirusScan NT 4.0.2 does not properly modify the scan.dat virus definition file during an update via FTP, but it reports that the update