CVE:CVE-2007-5091
CNNVD:CNNVD-200709-389
eGroupWare中存在多个跨站脚本攻击漏洞，远程攻击者可以借助对(1) preferences/inc/class.uicategories.inc.php和(2) admin/inc/class.uicategories.inc.php的cat_data[color]参数注入任意web脚本或HTML。
solution:Upgrade egroupware egroupware to a higher version than 1.4.001,and avoid the version 1.4.001