01.02.2

DATE	CVE	VULNERABILITY TITLE	RISK
2004-12-31	CVE-2004-1478	Remote vulnerability in Macromedia JRun JRun 4.0 does not properly generate and handle the JSESSIONID, which allows remote attackers to perform a session fixation attack and hijack a user's HTTP session. network low complexity hitachi macromedia	7.5
2004-10-05	CVE-2004-0928	Remote vulnerability in Macromedia JRun The Microsoft IIS Connector in JRun 4.0 and Macromedia ColdFusion MX 6.0, 6.1, and 6.1 J2EE allows remote attackers to bypass authentication and view source files, such as .asp, .pl, and .php files, via an HTTP request that ends in ";.cfm". network low complexity hitachi macromedia	5.0