CVE-2007-1467
Multiple cross-site scripting (XSS) vulnerabilities in (1) PreSearch.html and (2) PreSearch.class in Cisco Secure Access Control Server (ACS), VPN Client, Unified Personal Communicator, MeetingPlace, Unified MeetingPlace, Unified MeetingPlace Express, CallManager, IP Communicator, Unified Video Advantage, Unified Videoconferencing 35xx products, Unified Videoconferencing Manager, WAN Manager, Security Device Manager, Network Analysis Module (NAM), CiscoWorks and related products, Wireless LAN Solution Engine (WLSE), 2006 Wireless LAN Controllers (WLC), and Wireless Control System (WCS) allow remote attackers to inject arbitrary web script or HTML via the text field of the search form.
Key facts
- CVSS score
- 3.5 (v2.0)
- Severity
- LOW
- CVSS vector
AV:N/AC:M/Au:S/C:N/I:P/A:N- EPSS score
- 1.2% (69th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2007-1461)
- Published
- March 16, 2007
- NVD last modified
- June 16, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2007-1461 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.
View on the EU Vulnerability DatabaseAffected products
- cisco / acs solution engine
- cisco / acs solution engine
- cisco / call manager
- cisco / ciscoworks
- cisco / ip communicator
- cisco / meetingplace
- cisco / network analysis module
- cisco / security device manager
- cisco / unified meetingplace
- cisco / unified meetingplace express
- cisco / unified personal communicator
- cisco / unified video advantage
- cisco / unified videoconferencing
- cisco / unified videoconferencing manager
- cisco / vpn client
- cisco / vpn client
- cisco / vpn client
- cisco / vpn client
- cisco / vpn client
- cisco / vpn client
- cisco / vpn client
- cisco / vpn client
- cisco / vpn client
- cisco / vpn client
- cisco / vpn client
- cisco / vpn client
- cisco / vpn client
- cisco / vpn client
- cisco / vpn client
- cisco / vpn client
- cisco / vpn client
- cisco / vpn client
- cisco / vpn client
- cisco / vpn client
- cisco / vpn client
- cisco / vpn client
- cisco / wan manager
- cisco / wireless control system
- cisco / wireless lan controllers
- cisco / wireless lan solution engine
References
- http://secunia.com/advisories/24499
- http://securityreason.com/securityalert/2437
- http://www.cisco.com/en/US/products/products_security_response09186a0080803fe4.html(Vendor Advisory)
- http://www.securityfocus.com/archive/1/462932/100/0/threaded
- http://www.securityfocus.com/archive/1/462944/100/0/threaded
- http://www.securityfocus.com/bid/22982
- http://www.securitytracker.com/id?1017778
- http://www.vupen.com/english/advisories/2007/0973
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33024
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain