TI-2007-00506 CVE-2007-0519 · GHSA-xwcx-wmqx-wc85Cross-site scripting (XSS) vulnerability in memcp.php in XMB U2U Instant Messenger allows…Priority LOW 20Cross-site scripting (XSS) vulnerability in memcp.php in XMB U2U Instant Messenger allows remote authenticated users to inject arbitrary web script or HTML via the recipient field.CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.01384 · Published 2007-01-26 · No fix listed CWE-79