CVE-2007-1276: Usermin

Medium severity, CVSS 4.3. EPSS: 0.6% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in chooser.cgi in Webmin before 1.330 and Usermin before 1.260 allow remote attackers to inject arbitrary web script or HTML via a crafted filename.

Affected products

• Usermin Usermin: version 1.000 only; version 1.010 only; version 1.020 only; version 1.030 only; version 1.040 only; version 1.051 only; …
• Webmin Webmin: version 1.0.00 only; version 1.0.10 only; version 1.0.20 only; version 1.0.30 only; version 1.0.40 only; version 1.0.50 only; …

Published 2007-03-05. Last modified 2026-06-16.