Vulnerabilities > Citrix > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2007-11-30 | CVE-2007-6192 | Cryptographic Issues vulnerability in Citrix Netscaler 8.0 The web management interface in Citrix NetScaler 8.0 build 47.8 uses weak encryption (XOR of unpadded data) to store credentials within a cookie, which makes it easier for remote attackers to obtain cleartext credentials when a cookie is captured via a known-plaintext attack. | 4.3 |
| 2007-11-20 | CVE-2007-6037 | Cross-Site Scripting vulnerability in Citrix Netscaler 8.0Build47.8 Cross-site scripting (XSS) vulnerability in ws/generic_api_call.pl in Citrix NetScaler 8.0 build 47.8 allows remote attackers to inject arbitrary web script or HTML via the standalone parameter and other unspecified parameters. | 4.3 |
| 2007-11-05 | CVE-2007-0011 | Information Exposure vulnerability in Citrix Access Gateway 4.0/4.2/4.5 The web portal interface in Citrix Access Gateway (aka Citrix Advanced Access Control) before Advanced Edition 4.5 HF1 places a session ID in the URL, which allows context-dependent attackers to hijack sessions by reading "residual information", including the a referer log, browser history, or browser cache. | 5.0 |
| 2007-07-26 | CVE-2007-4018 | Remote vulnerability in Citrix Access Gateway 4.5 Citrix Access Gateway Advanced Edition before firmware 4.5.5 allows attackers to redirect users to arbitrary web sites and conduct phishing attacks via unknown vectors. network citrix | 6.8 |
| 2007-07-26 | CVE-2007-4016 | Remote vulnerability in Citrix Access Gateway 4.0/4.2/4.5 Unspecified vulnerability in the client components in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 allows attackers to execute arbitrary code via unspecified vectors. network citrix | 6.8 |
| 2007-07-25 | CVE-2007-3679 | Unspecified vulnerability in Citrix Access Gateway 4.5 The Citrix EPA ActiveX control (aka the "endpoint checking control" or CCAOControl Object) before 4.5.0.0 in npCtxCAO.dll in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 allows remote attackers to download and execute arbitrary programs onto a client system. network citrix | 4.3 |
| 2007-07-09 | CVE-2007-3625 | Denial Of Service vulnerability in Citrix Presentation Server Client Content-Redirection The Program Neighborhood Agent in Citrix Presentation Server Clients for 32-bit Windows before 10.100 allows remote attackers to cause a denial of service (agent exit) via a certain request that uses content redirection and a long pathname. | 5.0 |
| 2006-12-15 | CVE-2006-6573 | Information Disclosure vulnerability in Citrix Access Gateway Unspecified vulnerability in Citrix Access Gateway 4.5 Advanced Edition, and 4.2 with Advanced Access Control (AAC) 4.2, when deployed on the Access Gateway appliance 4.2 through 4.2.2 allows remote authenticated users to "gain access to data" and obtain sensitive information via unspecified vectors. network citrix | 6.0 |
| 2006-12-15 | CVE-2006-6572 | Multiple vulnerability in Citrix Access Gateway Advanced Access Control Unspecified vulnerability in Citrix Advanced Access Control (AAC) Option 4.0, and Access Gateway 4.2 with Advanced Access Control 4.2, before 20061114, when the Browser-Only access feature is enabled, allows remote authenticated users to bypass access policies via a certain login method, a different issue than CVE-2006-4846. | 6.5 |
| 2006-12-08 | CVE-2006-6334 | Buffer Overflow vulnerability in Citrix Presentation Server Client WFICA.OCX ActiveX Component Heap Heap-based buffer overflow in the SendChannelData function in wfica.ocx in Citrix Presentation Server Client before 9.230 for Windows allows remote malicious web sites to execute arbitrary code via a DataSize parameter that is less than the length of the Data buffer. network citrix | 6.8 |