Cross-site scripting (XSS) vulnerability in the ModWeb agent for Novell NetMail 3.52 before 3.52C allows remote attackers to inject arbitrary web script or HTML via calendar display fields.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Netmail | Novell | 3.0.3a-a (including) | 3.0.3a-a (including) |
| Netmail | Novell | 3.0.3a-b (including) | 3.0.3a-b (including) |
| Netmail | Novell | 3.1 (including) | 3.1 (including) |
| Netmail | Novell | 3.1-f (including) | 3.1-f (including) |
| Netmail | Novell | 3.5.2-a (including) | 3.5.2-a (including) |
| Netmail | Novell | 3.5.2-b (including) | 3.5.2-b (including) |
| Netmail | Novell | 3.5.2-e-ftfl (including) | 3.5.2-e-ftfl (including) |
| Netmail | Novell | 3.10 (including) | 3.10 (including) |
| Netmail | Novell | 3.10-a (including) | 3.10-a (including) |
| Netmail | Novell | 3.10-b (including) | 3.10-b (including) |
| Netmail | Novell | 3.10-c (including) | 3.10-c (including) |
| Netmail | Novell | 3.10-d (including) | 3.10-d (including) |
| Netmail | Novell | 3.10-e (including) | 3.10-e (including) |
| Netmail | Novell | 3.10-f (including) | 3.10-f (including) |
| Netmail | Novell | 3.10-g (including) | 3.10-g (including) |
| Netmail | Novell | 3.10-h (including) | 3.10-h (including) |