1.7.6

DATE	CVE	VULNERABILITY TITLE	RISK
2005-05-02	CVE-2005-1153	Multiple vulnerability Fixed in SCO OpenServer Release 5.0.7 Maintenance Pack 4 Released - Firefox before 1.0.3 and Mozilla Suite before 1.7.7, when blocking a popup, allows remote attackers to execute arbitrary code via a javascript: URL that is executed when the user selects the "Show javascript" option. network low complexity mozilla	7.5
2005-05-02	CVE-2005-0989	The find_replen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0.1 and 1.0.2, and Netscape 7.2 allows remote attackers to read portions of heap memory in a Javascript string via the lambda replace method. network low complexity mozilla netscape	5.0