Cross-Site Scripting (XSS) Vulnerabilities in Zimbra Desktop 7.1.2 b10978

CVE-2012-0903 · MEDIUM Severity

AV:N/AC:M/AU:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Desktop 7.1.2 b10978 allow remote attackers to inject arbitrary web script or HTML via the (1) Username or (2) MailBox Name.

Learn more about our Cis Benchmark Audit For Desktop Software.