Vulnerabilities

TI-2009-03478 CVE-2009-3642 · GHSA-377x-3gqm-h467

Multiple SQL injection vulnerabilities in the Call Logging feature in FrontRange HEAT…

LOW 35

Multiple SQL injection vulnerabilities in the Call Logging feature in FrontRange HEAT 8.01 allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01105 Published 2009-10-09 No fix listed CWE-89

TI-2006-02442 CVE-2006-2511 · GHSA-rpg2-hv7v-v69f

The ActiveX version of FrontRange iHEAT allows remote authenticated users to run…

LOW 31

The ActiveX version of FrontRange iHEAT allows remote authenticated users to run arbitrary programs or access arbitrary files on the host machine by uploading a file with an extension that is not associated with an appli…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01265 Published 2006-05-22 No fix listed

TI-2003-00223 CVE-2003-0241 · GHSA-79v6-pg2f-3mmc

FrontRange GoldMine mail agent 5.70 and 6.00 before 30503 directly sends HTML to the…

LOW 38

FrontRange GoldMine mail agent 5.70 and 6.00 before 30503 directly sends HTML to the default browser without setting its security zone or otherwise labeling it untrusted, which allows remote attackers to execute arbitrar…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02922 Published 2003-05-30 No fix listed

Vulnerabilities

Filters

Multiple SQL injection vulnerabilities in the Call Logging feature in FrontRange HEAT…

The ActiveX version of FrontRange iHEAT allows remote authenticated users to run…

FrontRange GoldMine mail agent 5.70 and 6.00 before 30503 directly sends HTML to the…