CVE:CVE-2007-2592
CNNVD:CNNVD-200705-224
Nokia Intellisync Mobile Suite 可能涉及Novell Groupwise Mobile Server和Nokia Intellisync Wireless Email Express，中存在多个跨站脚本攻击漏洞。远程攻击者可以借助提交到de/pda/dev_logon.asp的用户名参数和(a)usrmgr/registerAccount.asp,(b)de/create_account.asp以及其他文件中的多个未明向量，注入任意的web脚本或HTML。
solution:Upgrade nokia groupwise_mobile_server to a higher version than *; Upgrade nokia intellisync_mobile_suite to a higher version than 6.4.31.2,6.6.0.107,6.6.2.2,and avoid the version 6.4.31.2,6.6.0.107,6.6.2.2; Upgrade nokia intellisync_wireless_email_express to a higher version than *