Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2007-03-02	CVE-2007-1229	Cross-Site Scripting vulnerability in Nullsoft Shoutcast Server 1.9.7 Cross-site scripting (XSS) vulnerability in the Nullsoft ShoutcastServer 1.9.7 allows remote attackers to inject arbitrary web script or HTML via the top-level URI on the Incoming interface (port 8001/tcp), which is not properly handled in the administrator interface when viewing the log file. network nullsoft CWE-79	4.3
2006-06-13	CVE-2006-3007	HTML Injection vulnerability in Nullsoft SHOUTcast Multiple cross-site scripting (XSS) vulnerabilities in SHOUTcast 1.9.5 allow remote attackers to inject arbitrary HTML or web script via the DJ fields (1) Description, (2) URL, (3) Genre, (4) AIM, and (5) ICQ. network nullsoft	4.3
2001-08-03	CVE-2001-1304	Denial-Of-Service vulnerability in Nullsoft Shoutcast Server 1.8.2 Buffer overflow in SHOUTcast Server 1.8.2 allows remote attackers to cause a denial of service (crash) via several HTTP requests with a long (1) user-agent or (2) host HTTP header. network low complexity nullsoft	5.0