TI-2015-02934 CVE-2015-3319 · GHSA-6634-p5wf-9mgrHotspot Express hotEx Billing Manager 73 does not include the HTTPOnly flag in a…Priority LOW 28Hotspot Express hotEx Billing Manager 73 does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02825 · Published 2015-04-16 · No fix listed CWE-200