CVE-2007-2745

Name of the Vulnerable Software and Affected Versions vDesk Webmail version 4.03

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the type parameter in the printcal.pl script.

Recommendations For vDesk Webmail version 4.03, consider restricting access to the printcal.pl script until a patch is available, and avoid using the type parameter in this script to minimize the risk of exploitation.