CVE-2007-5581

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-11-08 · updated 2026-06-16
Weakness: CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in mpweb/scripts/mpx.dll in Cisco Unified MeetingPlace 5.4 and earlier and 6.0 allow remote attackers to inject arbitrary web script or HTML via the (1) FirstName and (2) LastName parameters.

Affected products

Cisco Unified Meetingplace: through 5.4; 4.3.0.246, 4.3.0.246.5, 5, 5.0, 5.2, 5.3 (+1)

References

http://secunia.com/advisories/26462
http://securitytracker.com/id?1018904
http://www.cisco.com/warp/public/707/cisco-sr-20071107-mp.shtml
http://www.securityfocus.com/bid/26364
http://www.vupen.com/english/advisories/2007/3772
https://exchange.xforce.ibmcloud.com/vulnerabilities/38298
http://secunia.com/advisories/26462
http://securitytracker.com/id?1018904
http://www.cisco.com/warp/public/707/cisco-sr-20071107-mp.shtml
http://www.securityfocus.com/bid/26364
http://www.vupen.com/english/advisories/2007/3772
https://exchange.xforce.ibmcloud.com/vulnerabilities/38298

Get alerted when CVE-2007-5581 or the next vulnerability affects your stack