CVE-2007-2592

no score yetEPSS 2.7%

Multiple cross-site scripting (XSS) vulnerabilities in Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter to de/pda/dev_logon.asp and (2) multiple unspecified vectors in (a) usrmgr/registerAccount.asp, (b) de/create_account.asp, and other files.

EPSS: 2.7% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
Published: 2007-05-11
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

nokia:groupwise_mobile_server
nokia:intellisync_mobile_suite
nokia:intellisync_wireless_email_express

References

http://osvdb.org/34515
http://osvdb.org/34516
http://osvdb.org/34517
http://secunia.com/advisories/25212
http://secunia.com/advisories/26199

Check your stack JSON