CVE		CVE-2007-0817
Status		Candidate
Description		Cross-site scripting (XSS) vulnerability in Adobe ColdFusion web server allows remote attackers to inject arbitrary HTML or web script via the User-Agent HTTP header, which is not sanitized before being displayed in an error page.
Severity		Low
CVSS score		1,9
CVSS vector		(AV:R/AC:H/Au:NR/C:N/I:P/A:N/B:N)
Phase		Assigned (07.02.2007)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-0817
References		BID : 22401
		BUGTRAQ : 20070205 Cold Fusion Web Server XSS 0 day
		CONFIRM : http://www.adobe.com/support/security/bulletins/ap...
		FRSIRT : ADV-2007-0593
		SECTRACK : 1017645
		SECUNIA : 24115
SecurityVulns:		ColdFusion crossite scripting