Nokia Intellisync Wireless Email Express vulnerabilities

3 CVEs affecting Nokia Intellisync Wireless Email Express, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-2592, published 2007-05-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-2592, published 2007-05-11. Medium severity, CVSS 4.3. EPSS: 2.7% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync…
CVE-2007-2591, published 2007-05-11. High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days. usrmgr/userList.asp in Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allows remote…
CVE-2007-2590, published 2007-05-11. Medium severity, CVSS 6.4. EPSS: 1.5% chance of exploitation in the next 30 days. Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allows remote attackers to obtain user…