CVE-2007-2590: Nokia Groupwise Mobile Server

Medium severity, CVSS 6.4. EPSS: 1.5% chance of exploitation in the next 30 days.

Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allows remote attackers to obtain user names and other sensitive information via a direct request to (1) usrmgr/userList.asp or (2) usrmgr/userStatusList.asp.

Affected products

• Nokia Groupwise Mobile Server: any version
• Nokia Intellisync Mobile Suite: version 6.4.31.2 only; version 6.6.0.107 only; version 6.6.2.2 only
• Nokia Intellisync Wireless Email Express: any version

Published 2007-05-11. Last modified 2026-06-16.