CVE:CVE-2010-1137
CNNVD:CNNVD-201004-033
VMWare是一款“虚拟PC”软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。
VMware VirtualCenter中的WebAccess存在跨站脚本攻击漏洞。远程攻击者可以通过虚拟主机的名称，注入任意的web脚本或HTML。
solution:Upgrade vmware virtualcenter to a higher version than 2.0.2,2.5,and avoid the version 2.0.2,2.5; Upgrade vmware server to a higher version than 1.0,and avoid the version 1.0; Upgrade vmware esx_server to a higher version than 3.0.3,3.5,and avoid the version 3.0.3,3.5