Vulnerabilities > Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

DATE CVE VULNERABILITY TITLE RISK
2002-12-31 CVE-2002-1958 Cross-Site Scripting vulnerability in Kmmail 1.0/1.0A/1.0B
Cross-site scripting (XSS) vulnerability in kmMail 1.0, 1.0a, and 1.0b allows remote attackers to inject arbitrary web script or HTML via (1) javascript in onmouseover or other attributes in "safe" HTML tags such as the "b" tag, or (2) the Subject field.
network
kmmail CWE-79
4.3
2002-12-31 CVE-2002-1852 Cross-Site Scripting vulnerability in Monkey-Project Monkey 0.5.0
Cross-site scripting (XSS) vulnerability in Monkey 0.5.0 allows remote attackers to inject arbitrary web script or HTML via (1) the URL or (2) a parameter to test2.pl.
4.3
2002-12-31 CVE-2002-1700 Cross-Site Scripting vulnerability in multiple products
Cross-site scripting vulnerability (XSS) in the missing template handler in Macromedia ColdFusion MX allows remote attackers to execute arbitrary script as other users by injecting script into the HTTP request for the name of a template, which is not filtered in the resulting 404 error message.
4.3
2002-12-31 CVE-2002-1651 Cross-Site Scripting vulnerability in Verity Search97 2.1
Cross-site scripting (XSS) vulnerability in Verity Search97 allows remote attackers to insert arbitrary web content and steal sensitive information from other clients, possibly due to certain error messages from template pages that use the (1) vformat or (2) vfilter functions.
network
verity CWE-79
4.3
2002-05-29 CVE-2002-0270 Cross-Site Scripting vulnerability in Opera Software Opera web Browser 9.10
Opera, when configured with the "Determine action by MIME type" option disabled, interprets an object as an HTML document even when its MIME Content-Type is text/plain, which could allow remote attackers to execute arbitrary script in documents that the user does not expect, possibly through web applications that use a text/plain type to prevent cross-site scripting attacks.
4.3