Vulnerabilities > Symantec > WEB Security > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2007-01-30 | CVE-2007-0564 | Denial-Of-Service vulnerability in Web Security The license registering interface in Symantec Web Security (SWS) before 3.0.1.85 allows attackers to cause a denial of service (CPU consumption) by submitting a large file. | 4.0 |
| 2007-01-30 | CVE-2007-0563 | Denial of Service And Cross-Site Scripting vulnerability in Symantec Web Security Multiple cross-site scripting (XSS) vulnerabilities in Symantec Web Security (SWS) before 3.0.1.85 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) error messages and (2) blocked page messages produced by SWS. network symantec | 4.3 |
| 2004-12-31 | CVE-2004-2755 | Cross-Site Scripting vulnerability in Symantec web Security 2.5/3.0/3.0.1 Cross-site scripting (XSS) vulnerability in Symantec Web Security 2.5, 3.0.0, and 3.0.1 before build 62 allows remote attackers to inject arbitrary web script or HTML via the query string in blocked URLs that are listed in (1) error or (2) block page messages. | 4.3 |