Vulnerabilities > HP > System Management Homepage > 3.0.0

DATE CVE VULNERABILITY TITLE RISK
2010-02-05 CVE-2009-4185 Cross-Site Scripting vulnerability in HP System Management Homepage
Cross-site scripting (XSS) vulnerability in proxy/smhui/getuiinfo in HP System Management Homepage (SMH) before 6.0 allows remote attackers to inject arbitrary web script or HTML via the servercert parameter.
network
hp CWE-79
4.3
2009-05-19 CVE-2009-1418 Cross-Site Scripting vulnerability in HP System Management Homepage
Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 3.0.1.73 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
network
hp CWE-79
4.3