CVE-2007-5581

MEDIUM 4.3CVE-2007-5581 · Published 08/11/2007 · updated 16/06/2026

In short

CVE-2007-5581 is a MEDIUM (CVSS 4.3) vulnerability affecting unified meetingplace (cisco).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 68.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
unified meetingplace cisco	`= 4.3.0.246= 4.3.0.246.5= 5= 5.0= 5.2= 5.3= 6.0≤ 5.4`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in mpweb/scripts/mpx.dll in Cisco Unified MeetingPlace 5.4 and earlier and 6.0 allow remote attackers to inject arbitrary web script or HTML via the (1) FirstName and (2) LastName parameters.

References

secunia.com/advisories/26462 · Vendor Advisory
securitytracker.com/id
cisco.com/warp/public/707/cisco-sr-20071107-mp.shtml · Vendor Advisory
securityfocus.com/bid/26364
vupen.com/english/advisories/2007/3772
exchange.xforce.ibmcloud.com/vulnerabilities/38298

More vulnerabilities in unified meetingplace

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

unified meetingplace

cisco

= 4.3.0.246= 4.3.0.246.5= 5= 5.0= 5.2= 5.3= 6.0≤ 5.4

No fix yet

More vulnerabilities in unified meetingplace

See all →