What’s Vulnerable › Vulnerabilities

CVE-2007-1467

• Severity: low (CVSS 3.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2007-03-16 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in (1) PreSearch.html and (2) PreSearch.class in Cisco Secure Access Control Server (ACS), VPN Client, Unified Personal Communicator, MeetingPlace, Unified MeetingPlace, Unified MeetingPlace Express, CallManager, IP Communicator, Unified Video Advantage, Unified Videoconferencing 35xx products, Unified Videoconferencing Manager, WAN Manager, Security Device Manager, Network Analysis Module (NAM), CiscoWorks and related products, Wireless LAN Solution Engine (WLSE), 2006 Wireless LAN Controllers (WLC), and Wireless Control System (WCS) allow remote attackers to inject arbitrary web script or HTML via the text field of the search form.

Affected products

• Cisco Acs Solution Engine: 4.1
• Cisco Call Manager: all versions
• Ciscoworks: all versions
• Cisco Ip Communicator: all versions
• Cisco Meetingplace: all versions
• Cisco Network Analysis Module: all versions
• Cisco Security Device Manager: all versions
• Cisco Unified Meetingplace: all versions
• Cisco Unified Meetingplace Express: all versions
• Cisco Unified Personal Communicator: all versions
• Cisco Unified Video Advantage: all versions
• Cisco Unified Videoconferencing: all versions
• Cisco Unified Videoconferencing Manager: all versions
• Cisco Vpn Client: 3.5.1, 3.5.2, 3.5.2b, 3.5.4, 3.6, 3.6.1 (+3)
• Cisco Wan Manager: all versions
• Cisco Wireless Control System: 4.0
• Cisco Wireless Lan Controllers: all versions
• Cisco Wireless Lan Solution Engine: all versions

References

• http://secunia.com/advisories/24499
• http://securityreason.com/securityalert/2437
• http://www.cisco.com/en/US/products/products_security_response09186a0080803fe4.html
• http://www.securityfocus.com/archive/1/462932/100/0/threaded
• http://www.securityfocus.com/archive/1/462944/100/0/threaded
• http://www.securityfocus.com/bid/22982
• http://www.securitytracker.com/id?1017778
• http://www.vupen.com/english/advisories/2007/0973
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33024
• http://secunia.com/advisories/24499
• http://securityreason.com/securityalert/2437
• http://www.cisco.com/en/US/products/products_security_response09186a0080803fe4.html

Get alerted when CVE-2007-1467 or the next vulnerability affects your stack