CVE-2012-5990

all versions

Multiple cross-site scripting (XSS) vulnerabilities in Health Monitor Login pages in Cisco Prime Network Control System (NCS) and

CVE-2007-5382

all versions

The conversion utility for converting CiscoWorks Wireless LAN Solution Engine (WLSE) 4.1.91.0 and earlier to Cisco Wireless Contro

CVE-2007-2035

<= 4.0.95

Cisco Wireless Control System (WCS) before 4.0.66.0 stores sensitive information under the web root with insufficient access contr

CVE-2007-2034

<= 4.0.95

Unspecified vulnerability in Cisco Wireless Control System (WCS) before 4.0.87.0 allows remote authenticated users to gain the pri

CVE-2007-2033

<= 4.0.95

Unspecified vulnerability in Cisco Wireless Control System (WCS) before 4.0.81.0 allows remote authenticated users to read any con

CVE-2007-2032

all versions

Cisco Wireless Control System (WCS) before 4.0.96.0 has a hard-coded FTP username and password for backup operations, which allows

CVE-2007-1467

all versions

Multiple cross-site scripting (XSS) vulnerabilities in (1) PreSearch.html and (2) PreSearch.class in Cisco Secure Access Control S

CVE-2006-3290

<= 3.2\(51\)

HTTP server in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) stores sensitive information under the web

CVE-2006-3289

<= 3.2\(51\)

Cross-site scripting (XSS) vulnerability in the login page of the HTTP interface for the Cisco Wireless Control System (WCS) for L

CVE-2006-3288

<= 3.2\(51\)

Unspecified vulnerability in the TFTP server in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51), when con

CVE-2006-3287

<= 4.0\(1\)

Cisco Wireless Control System (WCS) for Linux and Windows 4.0(1) and earlier uses a default administrator username "root" and pass

CVE-2006-3286

<= 3.2\(51\)

The internal database in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(63) stores a hard-coded username and

CVE-2006-3285

<= 3.2\(40\)

The internal database in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) uses an undocumented, hard-coded