CVE-2007-2592: Nokia Groupwise Mobile Server

Medium severity, CVSS 4.3. EPSS: 2.7% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter to de/pda/dev_logon.asp and (2) multiple unspecified vectors in (a) usrmgr/registerAccount.asp, (b) de/create_account.asp, and other files.

Affected products

• Nokia Groupwise Mobile Server: any version
• Nokia Intellisync Mobile Suite: version 6.4.31.2 only; version 6.6.0.107 only; version 6.6.2.2 only
• Nokia Intellisync Wireless Email Express: any version

Published 2007-05-11. Last modified 2026-06-16.