CSRF in Webhost Automation Helm Web Hosting Control Panel
CVE-2007-5251
Multiple cross-site scripting (XSS) vulnerabilities in Helm 3.2.16 allow remote attackers to inject arbitrary web script or HTML via (1) the showOption parameter to domain.asp, or the (2) Folder or (3) StartPath parameter to FileManager.asp.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.005 (41.2th percentile) — read the EPSS interpretation.
Affected products
- Webhost_automation Helm_web_hosting_control_panel — versions 3.2.16
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)