Approved changes feed: RSS · Atom

cpe:2.3:a:nokia:intellisync_mobile_suite:6.6.0.107:*:*:*:*:*:*:*

part: a version: 6.6.0.107 update: *

VendorNokia (817976ae-06c5-5680-b3fe-e55f44d8308a)
ProductIntellisync Mobile Suite (a8487db5-462d-515f-8985-acf1e89c6768)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-2592 vulnerable 2026-06-08 04:49:45.531811 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter to de/pda/dev_logon.asp and (2) multiple unspecified vectors in (a) usrmgr/registerAccount.asp, (b) de/create_account.asp, and other files.
Published: 2007-05-11T03:55:00.000Z
Updated: 2024-08-07T13:42:33.445Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-2591 vulnerable 2026-06-08 04:49:45.531263 Details available
usrmgr/userList.asp in Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allows remote attackers to modify user account details and cause a denial of service (account deactivation) via the userid parameter in an update action.
Published: 2007-05-11T03:55:00.000Z
Updated: 2024-08-07T13:42:33.410Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-2590 vulnerable 2026-06-08 04:49:45.529741 Details available
Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allows remote attackers to obtain user names and other sensitive information via a direct request to (1) usrmgr/userList.asp or (2) usrmgr/userStatusList.asp.
Published: 2007-05-11T03:55:00.000Z
Updated: 2024-08-07T13:42:33.555Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.