Vulnerabilities > 3Com
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2010-05-27 | CVE-2010-2103 | Cross-Site Scripting vulnerability in Apache Axis2 1.4.1/1.5.1 Cross-site scripting (XSS) vulnerability in axis2-admin/axis2-admin/engagingglobally in the administration console in Apache Axis2/Java 1.4.1, 1.5.1, and possibly other versions, as used in SAP Business Objects 12, 3com IMC, and possibly other products, allows remote attackers to inject arbitrary web script or HTML via the modules parameter. | 4.3 |
| 2009-03-04 | CVE-2008-6395 | USE of Externally-Controlled Format String vulnerability in 3Com Wireless 8760 Dual-Radio The web management interface in 3Com Wireless 8760 Dual Radio 11a/b/g PoE Access Point allows remote attackers to cause a denial of service (device crash) via a malformed HTTP POST request. | 7.8 |
| 2007-10-12 | CVE-2007-5420 | Information Exposure vulnerability in 3Com 3Crwe554G72T 3Crwer10075 The 3Com 3CRWER100-75 router with 1.2.10ww software, when remote management is disabled but a web server has been configured, serves a web page to external clients, which might allow remote attackers to obtain information about the router's existence and product details. | 2.6 |
| 2007-10-12 | CVE-2007-5419 | Configuration vulnerability in 3Com 3Crwe554G72T 3Crwer10075 The 3Com 3CRWER100-75 router with 1.2.10ww software, when enabling an optional virtual server, configures this server to accept all source IP addresses on the external (Internet) interface unless the user selects other options, which might expose the router to unintended incoming traffic from remote attackers, as demonstrated by setting up a virtual server on port 80, which allows remote attackers to access the web management interface. | 10.0 |
| 2007-07-11 | CVE-2007-3711 | Improper Input Validation vulnerability in 3Com Tippingpoint IPS TOS Unspecified vulnerability in TOS 2.1.x, 2.2.x before 2.2.5, and 2.5.x before 2.5.2 on TippingPoint IPS allows remote attackers to avoid detection by sending certain fragmented packets. | 7.5 |
| 2007-07-11 | CVE-2007-3701 | Improper Input Validation vulnerability in multiple products TippingPoint IPS before 20070710 does not properly handle a hex-encoded alternate Unicode '/' (slash) character, which might allow remote attackers to send certain network traffic and avoid detection, as demonstrated by a cmd.exe attack. | 7.5 |
| 2007-07-03 | CVE-2007-3533 | Remote Denial of Service vulnerability in 3Com 3Cnj220 2.0.22 The 3Com IntelliJack Switch NJ220 before 2.0.23 allows remote attackers to cause a denial of service (reboot and reporting outage) via a loopback packet with zero in the length field. | 5.0 |
| 2007-06-11 | CVE-2006-3974 | Cross-Site Scripting vulnerability in 3Com 3Cr860-95 1.04 Cross-site scripting (XSS) vulnerability in cgi-bin/admin in 3Com OfficeConnect Secure Router with firmware 1.04-168 allows remote attackers to inject arbitrary web script or HTML via the tk parameter. network 3com | 4.3 |
| 2007-05-16 | CVE-2007-2734 | Remote Security vulnerability in 3Crx506-96 The 3Com TippingPoint IPS do not properly handle certain full-width and half-width Unicode character encodings in an HTTP POST request, which might allow remote attackers to evade detection of HTTP traffic. | 7.5 |
| 2006-12-01 | CVE-2006-6183 | Buffer Errors vulnerability in 3Com 3Ctftpsvc 2.0.1 Multiple stack-based buffer overflows in 3Com 3CTftpSvc 2.0.1, and possibly earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a long mode field (aka transporting mode) in a (1) GET or (2) PUT command. | 10.0 |