CVE-2005-1676

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-05-20 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in Groove Mobile Workspace in Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 allow remote attackers to inject arbitrary web script or HTML via the (1) picture columns embedded within SharePoint lists or (2) drop-down menus in a SharePoint list.

Affected products

Groove Workspace: through 2.5n_build_1871
Groove Virtual Office: through 3.1_build_2338; through 3.1a_build_2364

References

http://secunia.com/advisories/15421
http://www.kb.cert.org/vuls/id/372618
http://www.kb.cert.org/vuls/id/514386
http://www.kb.cert.org/vuls/id/JGEI-6BCRCC
http://secunia.com/advisories/15421
http://www.kb.cert.org/vuls/id/372618
http://www.kb.cert.org/vuls/id/514386
http://www.kb.cert.org/vuls/id/JGEI-6BCRCC

Get alerted when CVE-2005-1676 or the next vulnerability affects your stack