Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2007-07-30	CVE-2007-4073	Remote Security vulnerability in Webbler CMS Webbler CMS before 3.1.6 does not properly restrict use of "mail a friend" forms, which allows remote attackers to send arbitrary amounts of forged e-mail. network low complexity tincan	5.0
2007-07-30	CVE-2007-4072	Information Disclosure vulnerability in Webbler CMS Webbler CMS before 3.1.6 provides the full installation path within HTML comments in certain documents, which allows remote attackers to obtain sensitive information by viewing the HTML source, as demonstrated by viewing the source generated from index.php. network low complexity tincan	5.0
2007-07-30	CVE-2007-4071	Cross-Site Scripting vulnerability in Webbler CMS Multiple cross-site scripting (XSS) vulnerabilities in uploader/index.php in Webbler CMS before 3.1.6 allow remote attackers to inject arbitrary web script or HTML via the (1) page or (2) login parameter. network tincan	4.3