| ID | Date
Public | Name |
|---|
VU#923508 | 06/18/2008 | Microsoft Internet Explorer 6 contains a cross-domain vulnerability |
VU#471361 | 06/04/2007 | Microsoft Internet Explorer cross-domain frame race condition |
VU#935737 | 12/19/2007 | Adobe Flash Player may load arbitrary, malformed cross-domain policy files |
VU#252764 | 08/08/2006 | Microsoft Internet Explorer source element cross-domain vulnerability |
VU#289988 | 06/25/2007 | Apple Safari cross-domain HTTP redirection race condition |
VU#356600 | 12/15/2004 | Microsoft Internet Explorer DHTML Editing ActiveX control contains a cross-domain vulnerability |
VU#651928 | 09/14/2004 | Mozilla may allow violation of cross-domain scripting policies via dragging |
VU#462451 | 02/21/2002 | Microsoft Internet Explorer allows read access to local files via incorrect VBScript handling |
VU#883108 | 06/27/2006 | Microsoft Internet Explorer HTML Document object cross-domain vulnerability |
VU#784102 | 11/25/2003 | Microsoft Internet Explorer does not properly validate source of URL stored in Travel Log |
VU#845708 | 06/21/2007 | Apple WebCore XMLHttpRequest fails to properly serialize headers into an HTTP request |
VU#326412 | 09/10/2003 | Microsoft Internet Explorer execCommand method does not properly validate URL source |
VU#652452 | 09/10/2003 | Microsoft Internet Explorer does not adequately validate javascript: protocol URL |
VU#713878 | 06/03/2004 | Microsoft Internet Explorer does not properly validate source of redirected frame |
VU#143297 | 06/04/2007 | Mozilla Firefox allows cross-domain iframe access via JavaScript |
VU#580299 | 02/08/2005 | Microsoft Internet Explorer contains URL decoding cross-domain vulnerability |
VU#972415 | 12/21/2004 | Microsoft Windows HTML Help ActiveX control does not adequately validate window source |
VU#205148 | 08/20/2003 | Microsoft Internet Explorer does not properly evaluate Content-Type and Content-Disposition headers |
VU#771604 | 09/10/2003 | Microsoft Internet Explorer does not properly validate URL sources |
VU#998369 | 04/16/2005 | Apple Web Kit-based browsers may allow remote access to local filesystem contents |
VU#288308 | 12/28/2003 | Microsoft Internet Information Server (IIS) vulnerable to cross-site scripting via HTTP TRACK method |
VU#885753 | 02/14/2007 | Mozilla browsers "location.hostname" cross-domain vulnerability |
VU#996798 | 07/13/2005 | Mozilla Firefox insecurely handles content from external applications |
VU#823971 | 02/08/2005 | Microsoft Internet Explorer contains a Channel Definition Format (CDF) cross-domain vulnerability |
VU#867593 | 01/20/2003 | Web servers enable HTTP TRACE method by default |
VU#207264 | 07/11/2004 | Microsoft Internet Explorer does not properly handle function redirection |
VU#323070 | 11/25/2003 | Outlook Express MHTML protocol handler does not properly validate source of alternate content |
VU#516627 | 05/12/2008 | Microsoft Internet Explorer fails to properly restrict access to frames |
VU#534710 | 05/07/2005 | Mozilla fails to properly prevent "JavaScript:" URIs containing "eval()" from being executed in the context of other URIs in the history list |
VU#484814 | 05/11/2004 | Microsoft Help and Support Center (HCP) fails to properly validate HCP URLs |
VU#244729 | 12/03/2002 | Microsoft Internet Explorer does not adequately validate window ornament parameters in dialog frames |
VU#413886 | 09/10/2003 | Microsoft Internet Explorer allows mouse events to manipulate window objects and perform "drag and drop" operations |
VU#347812 | 01/15/2008 | UPnP enabled by default in multiple devices |
VU#304064 | 01/03/2007 | Apple Quicktime HREFTrack Cross-Zone Scripting vulnerability |
VU#728563 | 04/17/2002 | Microsoft Internet Explorer does not adequately validate source of dialog frame |