← Database

CVE-2004-1499

MEDIUM CVSS: 4.3 Published: 2004-12-31 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers to execute arbitrary web script or HTML via the Subject field.

Affected Platforms

Webhost Automation Helm Control Panel

Weakness Type

NVD-CWE-Other

References