CVE-2007-5251: Webhost Automation Helm Web Hosting Control Panel

Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in Helm 3.2.16 allow remote attackers to inject arbitrary web script or HTML via (1) the showOption parameter to domain.asp, or the (2) Folder or (3) StartPath parameter to FileManager.asp.

Affected products

Published 2007-10-06. Last modified 2026-06-16.