Tivoli Netcool Security Manager

DATE	CVE	VULNERABILITY TITLE	RISK
2007-12-15	CVE-2007-6363	Cross-Site Scripting vulnerability in IBM Tivoli Netcool Security Manager 1.3.0 IBM Tivoli Netcool Security Manager 1.3.0 before Interim Fix 1, when using Active Directory (AD) LDAP authentication, allows remote attackers to obtain login access via unspecified vectors without entering a password. network high complexity ibm CWE-79	2.1
2007-12-04	CVE-2007-6219	Cross-Site Scripting vulnerability in IBM Tivoli Netcool Security Manager 1.3.0 Cross-site scripting (XSS) vulnerability in IBM Tivoli Netcool Security Manager 1.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. network ibm CWE-79	4.3