Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2005-4747: WebHost Automation Helm lets attackers run malicious scripts on pages

CVE-2005-4747 · published 20 years ago

Summary

Versions of WebHost Automation Helm older than 3.2.6 let a remote user add their own web code to the default page. This could let the attacker see confidential information, hijack user sessions, or trick visitors into revealing data. Upgrade to version 3.2.6 or later as soon as possible to stop the risk.

Original advisory text

Cross-site scripting (XSS) vulnerability in WebHost Automation Ltd Helm before 3.2.6 allows remote attackers to inject arbitrary web script or HTML via unknown vectors involving the default page.

References

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker partial control (estimated)

Severity

4.3 Medium

Exploitation

1% chance of attack within 30 days

Timeline

Published31 Dec 2005

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2005-4747 · NVD

Track software like this

Free during beta