CVE-2011-1737

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Email application in HP Palm webOS 1.4.5 and 1.4.5.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

• HP / palm_webos1.4.5 – 1.4.5
• HP / palm_webos1.4.5.1 – 1.4.5.1

References

• MISChttp://www.securitytracker.com/id?1025514
• MISChttps://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02822174
• MISChttps://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02822174
• MISChttp://www.securityfocus.com/bid/47787