Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2008-03-17	CVE-2008-1347	Cross-Site Scripting vulnerability in Myiosoft Easycalendar 4.0Tr Multiple cross-site scripting (XSS) vulnerabilities in staticpages/easygallery/index.php in MyioSoft EasyGallery 5.0tr and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO or (2) the q parameter in an about action to the help system. network myiosoft CWE-79	4.3
2008-03-17	CVE-2008-1345	Cross-Site Scripting vulnerability in Myiosoft Easycalendar 4.0Tr Cross-site scripting (XSS) vulnerability in plugins/calendar/calendar_backend.php in MyioSoft EasyCalendar 4.0tr and earlier allows remote attackers to inject arbitrary web script or HTML via the day parameter in a dayview action. network myiosoft CWE-79	4.3