Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2017-04-14	CVE-2016-4890	7PK - Security Features vulnerability in Zohocorp Servicedesk Plus 9.0 ZOHO ManageEngine ServiceDesk Plus before 9.2 uses an insecure method for generating cookies, which makes it easier for attackers to obtain sensitive password information by leveraging access to a cookie. network low complexity zohocorp CWE-254	5.3
2017-04-14	CVE-2016-4888	Cross-site Scripting vulnerability in Zohocorp Servicedesk Plus 9.0 Cross-site scripting (XSS) vulnerability in ZOHO ManageEngine ServiceDesk Plus before 9.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. network low complexity zohocorp CWE-79	5.4