Vulnerabilities > Sympa > Sympa > 4.0

DATE CVE VULNERABILITY TITLE RISK
2008-04-02 CVE-2008-1648 Improper Input Validation vulnerability in Sympa
Sympa before 5.4 allows remote attackers to cause a denial of service (daemon crash) via an e-mail message with a malformed value of the Content-Type header and unspecified other headers.
network
low complexity
sympa CWE-20
5.0
2004-08-21 CVE-2004-1735 HTML Injection vulnerability in Sympa New List
Cross-site scripting (XSS) vulnerability in the create list option in Sympa 4.1.x and earlier allows remote authenticated users to inject arbitrary web script or HTML via the description field.
network
sympa
4.3