Vulnerabilities > Microsoft > Forefront Threat Management Gateway > Medium
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2009-04-15 | CVE-2009-0237 | Cross-Site Scripting vulnerability in Microsoft products Cross-site scripting (XSS) vulnerability in cookieauth.dll in the HTML forms authentication component in Microsoft Forefront Threat Management Gateway, Medium Business Edition (TMG MBE); and Internet Security and Acceleration (ISA) Server 2006, 2006 Supportability Update, and 2006 SP1; allows remote attackers to inject arbitrary web script or HTML via "authentication input" to this component, aka "Cross-Site Scripting Vulnerability." | 4.3 |
2009-04-15 | CVE-2009-0077 | Unspecified vulnerability in Microsoft products The firewall engine in Microsoft Forefront Threat Management Gateway, Medium Business Edition (TMG MBE); and Internet Security and Acceleration (ISA) Server 2004 SP3, 2006, 2006 Supportability Update, and 2006 SP1; does not properly manage the session state of web listeners, which allows remote attackers to cause a denial of service (many stale sessions) via crafted packets, aka "Web Proxy TCP State Limited Denial of Service Vulnerability." | 5.0 |