WPS Toolkit

DATE	CVE	VULNERABILITY TITLE	RISK
2012-11-06	CVE-2011-5237	Improper Input Validation vulnerability in Paypal WPS Toolkit PayPal WPS ToolKit does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. network paypal CWE-20	5.8

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.