CVE-2005-1756

Cross-site scripting (XSS) vulnerability in the ModWeb agent for Novell NetMail 3.52 before 3.52C allows remote attackers to inject arbitrary web script or HTML via calendar display fields.

Affected Software

Name	Vendor	Start Version	End Version
Netmail	Novell	3.0.3a-a (including)	3.0.3a-a (including)
Netmail	Novell	3.0.3a-b (including)	3.0.3a-b (including)
Netmail	Novell	3.1 (including)	3.1 (including)
Netmail	Novell	3.1-f (including)	3.1-f (including)
Netmail	Novell	3.5.2-a (including)	3.5.2-a (including)
Netmail	Novell	3.5.2-b (including)	3.5.2-b (including)
Netmail	Novell	3.5.2-e-ftfl (including)	3.5.2-e-ftfl (including)
Netmail	Novell	3.10 (including)	3.10 (including)
Netmail	Novell	3.10-a (including)	3.10-a (including)
Netmail	Novell	3.10-b (including)	3.10-b (including)
Netmail	Novell	3.10-c (including)	3.10-c (including)
Netmail	Novell	3.10-d (including)	3.10-d (including)
Netmail	Novell	3.10-e (including)	3.10-e (including)
Netmail	Novell	3.10-f (including)	3.10-f (including)
Netmail	Novell	3.10-g (including)	3.10-g (including)
Netmail	Novell	3.10-h (including)	3.10-h (including)

NVD	https://nvd.nist.gov/vuln/detail/CVE-2005-1756
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html

Affected Software

References