7.00.patch.3

DATE	CVE	VULNERABILITY TITLE	RISK
2007-07-06	CVE-2007-3613	Cross-Site Scripting vulnerability in SAP Internet Graphics Server PARAMS Cross-site scripting (XSS) vulnerability in ADM:GETLOGFILE in SAP Internet Graphics Service (IGS) allows remote attackers to inject arbitrary web script or HTML via the PARAMS parameter. network sap	4.3
2006-08-14	CVE-2006-4134	Remote Denial Of Service vulnerability in SAP Internet Graphics Server Unspecified vulnerability related to a "design flaw" in SAP Internet Graphics Service (IGS) 6.40 and earlier and 7.00 and earlier allows remote attackers to cause a denial of service (service shutdown) via certain HTTP requests. network low complexity sap	5.0
2006-08-14	CVE-2006-4133	Remote Buffer Overflow vulnerability in SAP Internet Graphics Server Heap-based buffer overflow in SAP Internet Graphics Service (IGS) 6.40 and earlier, and 7.00 and earlier, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via an HTTP request with an ADM:GETLOGFILE command and a long portwatcher argument, which triggers the overflow during error message construction when the _snprintf function returns a negative value that is used in a memcpy operation. network low complexity sap	7.5