CVE-2007-5290 - CVE House
Back to Database
Status published Medium CVE-2007-5290

Multiple cross-site scripting (XSS) vulnerabilities in MailBee WebMail Pro 3.4...

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in MailBee WebMail Pro 3.4 and earlier; and possibly MailBee WebMail Pro ASP before 3.4.64, WebMail Lite ASP before 4.0.11, and WebMail Lite PHP before 4.0.22; allow remote attackers to inject arbitrary web script or HTML via the (1) mode parameter to login.php and the (2) mode2 parameter to default.asp in an advanced_login mode.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-5290

Credits & Attribution

No credits recorded in the NVD database.

References

More from afterlogic

View All →
CVE-2021-26294
An issue was discovered in AfterLogic Aurora through 7.7.9 and...
High 7.5
CVE-2021-26293
An issue was discovered in AfterLogic Aurora through 8.5.3 and...
Critical 9.8
CVE-2019-19129
Afterlogic WebMail Pro 8.3.11, and WebMail in Afterlogic Aurora 8.3.11,...
Medium 6.1
CVE-2019-16238
Afterlogic Aurora through 8.3.9-build-a3 has XSS that can be leveraged...
Medium 6.1
CVE-2017-14597
AdminPanel in AfterLogic WebMail 7.7 and Aurora 7.7.5 has XSS...
Medium 4.8

Affected Vendor

Affected Software

mailbee webmail
Vulnerable Versions:
3.1, 3.2, 3.3, 3.4

Timeline

Official Publish: October 9th, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.