CVE-2007-2592: nokia intellisync_mobile_suite
Vulnerability summary
CVE-2007-2592 is a medium (CVSS 4.3) vulnerability in nokia intellisync_mobile_suite. EPSS estimates a 2.66% chance of exploitation in the next 30 days, higher than 85.4% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 11-05-2007PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter to de/pda/dev_logon.asp and (2) multiple unspecified vectors in (a) usrmgr/registerAccount.asp, (b) de/create_account.asp, and other files.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
2.66%
Chance of exploitation in the next 30 days
Percentile
85%
Versus all other CVEs
30-day change
0.00 pp
From 2.66% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (sec-consult.com)
Maturity: unknown
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Nokia1 product
- intellisync_mobile_suite6.4.31.2 | 6.6.0.107 | 6.6.2.2
1 vendor · 1 product