VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 8, 2007· Updated Jun 16, 2026

CVE-2007-5581

CVE-2007-5581

Description

Multiple cross-site scripting (XSS) vulnerabilities in mpweb/scripts/mpx.dll in Cisco Unified MeetingPlace 5.4 and earlier and 6.0 allow remote attackers to inject arbitrary web script or HTML via the (1) FirstName and (2) LastName parameters.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9
  • Cisco Systems, Inc./Unified Meetingplace9 versions
    cpe:2.3:a:cisco:unified_meetingplace:*:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:a:cisco:unified_meetingplace:*:*:*:*:*:*:*:*range: <=5.4
    • cpe:2.3:a:cisco:unified_meetingplace:4.3.0.246:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_meetingplace:4.3.0.246.5:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_meetingplace:5:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_meetingplace:5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_meetingplace:5.2:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_meetingplace:5.3:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_meetingplace:6.0:*:*:*:*:*:*:*
    • (no CPE)range: <=6.0

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.