CVE-2007-2590

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-05-11 · updated 2026-06-16
Weakness: CWE-200

Description

Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allows remote attackers to obtain user names and other sensitive information via a direct request to (1) usrmgr/userList.asp or (2) usrmgr/userStatusList.asp.

Affected products

Nokia Groupwise Mobile Server: all versions
Nokia Intellisync Mobile Suite: 6.4.31.2, 6.6.0.107, 6.6.2.2
Nokia Intellisync Wireless Email Express: all versions

References

http://osvdb.org/34514
http://secunia.com/advisories/25212
http://securityreason.com/securityalert/2689
http://www.sec-consult.com/289.html
http://www.securityfocus.com/archive/1/468048/100/0/threaded
http://www.vupen.com/english/advisories/2007/1727
http://osvdb.org/34514
http://secunia.com/advisories/25212
http://securityreason.com/securityalert/2689
http://www.sec-consult.com/289.html
http://www.securityfocus.com/archive/1/468048/100/0/threaded
http://www.vupen.com/english/advisories/2007/1727

Get alerted when CVE-2007-2590 or the next vulnerability affects your stack