1.51

DATE	CVE	VULNERABILITY TITLE	RISK
2002-08-12	CVE-2002-0504	Cross-Site Scripting vulnerability in Citrix Nfuse 1.5/1.51/1.6 Cross-site scripting vulnerability in Citrix NFuse 1.6 and earlier does not quote results from the getLastError method, which allows remote attackers to execute script in other clients via the NFuse_Application parameter to (1) launch.jsp or (2) launch.asp. network low complexity citrix	7.5
2001-10-18	CVE-2001-0760	Unspecified vulnerability in Citrix Nfuse 1.51 Citrix Nfuse 1.51 allows remote attackers to obtain the absolute path of the web root via a malformed request to launch.asp that does not provide the session field. network low complexity citrix	5.0