← Database

CVE-2007-2590

MEDIUM CVSS: 6.4 Published: 2007-05-11 Modified: 2026-06-16

Description

Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allows remote attackers to obtain user names and other sensitive information via a direct request to (1) usrmgr/userList.asp or (2) usrmgr/userStatusList.asp.

Affected Platforms

Nokia Intellisync Mobile SuiteNokia Intellisync Wireless Email ExpressNokia Groupwise Mobile Server

Weakness Type

CWE-200

References