CVE-2007-4555: Ipswitch Ws FTP

Medium severity, CVSS 4.3. EPSS: 1.6% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Ipswitch WS_FTP allows remote attackers to inject arbitrary web script or HTML via arguments to a valid command, which is not properly handled when it is displayed by the view log option in the administration interface. NOTE: this can be leveraged to create a new admin account.

Affected products

Published 2007-08-28. Last modified 2026-06-16.