CVE-2006-3522

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-07-12 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in Clearswift MIMEsweeper for Web before 5.1.15 Hotfix allows remote attackers to inject arbitrary web script or HTML via the URL, which is reflected back in an error message when trying to access a blocked web site.

Affected products

Clearswift Mimesweeper For Web: through 5.1.14

References

http://download.mimesweeper.com/www/TechnicalDocumentation/WebReadMeHotfix5115.htm
http://marc.info/?l=full-disclosure&m=115249298204354&w=2
http://marc.info/?l=full-disclosure&m=115253320721404&w=2
http://marc.info/?l=full-disclosure&m=115253898206225&w=2
http://secunia.com/advisories/20998
http://securitytracker.com/id?1016454
http://www.securityfocus.com/archive/1/439641/100/0/threaded
http://www.securityfocus.com/archive/1/440140/100/0/threaded
http://www.securityfocus.com/bid/18916
http://www.vupen.com/english/advisories/2006/2731
https://exchange.xforce.ibmcloud.com/vulnerabilities/27642
http://download.mimesweeper.com/www/TechnicalDocumentation/WebReadMeHotfix5115.htm

Get alerted when CVE-2006-3522 or the next vulnerability affects your stack