Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2007-12-04	CVE-2007-6232	Cross-Site Scripting vulnerability in FTP Admin 0.1.0 Cross-site scripting (XSS) vulnerability in index.php in FTP Admin 0.1.0 allows remote attackers to inject arbitrary web script or HTML via the error parameter in an error page action. network hp ibm linux santa-cruz-operation sgi sun windriver ftp CWE-79	4.3
2007-05-16	CVE-2007-1898	Unspecified vulnerability in Jetbox CMS 2.1 formmail.php in Jetbox CMS 2.1 allows remote attackers to send arbitrary e-mails (spam) via modified recipient, _SETTINGS[allowed_email_hosts][], and subject parameters. network apple hp linux microsoft santa-cruz-operation sun windriver jetbox	5.8