CVE-2009-5097: HP Palm Pre Webos

High severity, CVSS 7.1. EPSS: 1.9% chance of exploitation in the next 30 days.

Palm Pre WebOS 1.1 and earlier processes JavaScript in email messages, which allows remote attackers to execute arbitrary JavaScript, as demonstrated by reading PalmDatabase.db3.

Affected products

• HP Palm Pre Webos: up to and including 1.1.0; version 1.0.2 only; version 1.0.3 only; version 1.0.4 only

Published 2011-09-13. Last modified 2026-06-16.