CVE-2005-1756

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

Cross-site scripting (XSS) vulnerability in the ModWeb agent for Novell NetMail 3.52 before 3.52C allows remote attackers to inject arbitrary web script or HTML via calendar display fields.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/15644Patch, Vendor Advisory
http://support.novell.com/cgi-bin/search/searchtid.cgi?/10097957.htm
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971588.htmPatch, Vendor Advisory
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971590.htmPatch, Vendor Advisory
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971591.htmPatch, Vendor Advisory
http://www.osvdb.org/17240
http://www.securityfocus.com/bid/13926
http://www.vupen.com/english/advisories/2005/0727
http://secunia.com/advisories/15644Patch, Vendor Advisory
http://support.novell.com/cgi-bin/search/searchtid.cgi?/10097957.htm
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971588.htmPatch, Vendor Advisory
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971590.htmPatch, Vendor Advisory
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971591.htmPatch, Vendor Advisory
http://www.osvdb.org/17240
http://www.securityfocus.com/bid/13926
http://www.vupen.com/english/advisories/2005/0727

Timeline

Published: Jun 8, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-17577.5Buffer overflow in the Modweb agent for Novell NetMail 3.52 before 3.52C, when renaming folders, may allow attackers to execute arbitrary co CVE-2005-17587.5Buffer overflow in the IMAP command continuation function in Novell NetMail 3.52 before 3.52C may allow remote attackers to execute arbitrar CVE-2005-17591.2Race condition in shtool 2.0.1 and earlier allows local users to modify or create arbitrary files via a symlink attack on temporary files af CVE-2005-17607.5sysreport 1.3.15 and earlier includes contents of the up2date file in a report, which leaks the password for a proxy server in plaintext and CVE-2005-17612.1Linux kernel 2.6 and 2.4 on the IA64 architecture allows local users to cause a denial of service (kernel crash) via ptrace and the restore_CVE-2005-17622.1The ptrace call in the Linux kernel 2.6.8.1 and 2.6.10 for the AMD64 platform allows local users to cause a denial of service (kernel crash)CVE-2005-17637.2Buffer overflow in ptrace in the Linux Kernel for 64-bit architectures allows local users to write bytes into kernel memory.CVE-2005-17642.1Linux 2.6.11 on 64-bit x86 (x86_64) platforms does not use a guard page for the 47-bit address page to protect against an AMD K8 bug, which CVE-2005-17652.1syscall in the Linux kernel 2.6.8.1 and 2.6.10 for the AMD64 platform, when running in 32-bit compatibility mode, allows local users to caus CVE-2005-17665.1Heap-based buffer overflow in rtffplin.cpp in RealPlayer 10.5 6.0.12.1056 on Windows, and 10, 10.0.1.436, and other versions before 10.0.5 o CVE-2005-17672.1traps.c in the Linux kernel 2.6.x and 2.4.x executes stack segment faults on an exception stack, which allows local users to cause a denial CVE-2005-17683.7Race condition in the ia32 compatibility code for the execve system call in Linux kernel 2.4 before 2.4.31 and 2.6 before 2.6.6 allows local