3.0.4

DATE	CVE	VULNERABILITY TITLE	RISK
2008-03-19	CVE-2008-1006	Cross-Site Scripting vulnerability in Apple Safari Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML by using the window.open function to change the security context of a web page. network apple CWE-79	4.3
2008-03-19	CVE-2008-1005	Information Exposure vulnerability in Apple Safari WebCore, as used in Apple Safari before 3.1, does not properly mask the password field when reverse conversion is used with the Kotoeri input method, which allows physically proximate attackers to read the password. local low complexity apple CWE-200	2.1
2008-03-19	CVE-2008-1004	Cross-Site Scripting vulnerability in Apple Safari Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the Web Inspector. network apple CWE-79	4.3
2008-03-19	CVE-2008-1003	Cross-Site Scripting vulnerability in Apple Safari Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to sites that set the document.domain property or have the same document.domain. network apple CWE-79	4.3
2008-03-19	CVE-2008-1002	Cross-Site Scripting vulnerability in Apple Safari Cross-site scripting (XSS) vulnerability in Apple Safari before 3.1 allows remote attackers to inject arbitrary web script or HTML via a crafted javascript: URL. network apple CWE-79	4.3
2008-03-19	CVE-2008-1001	Cross-Site Scripting vulnerability in Apple Safari Cross-site scripting (XSS) vulnerability in Apple Safari before 3.1, when running on Windows XP or Vista, allows remote attackers to inject arbitrary web script or HTML via a crafted URL that is not properly handled in the error page. network microsoft apple CWE-79	4.3