CVE-2007-5251

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

0.52%

Published

Oct 6, 2007

Modified

Jun 16, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple cross-site scripting (XSS) vulnerabilities in Helm 3.2.16 allow remote attackers to inject arbitrary web script or HTML via (1) the showOption parameter to domain.asp, or the (2) Folder or (3) StartPath parameter to FileManager.asp.

Weaknesses (CWE)

CWE-352

Affected Products (1)

webhost_automation · helm_web_hosting_control_panelvulnerable

References (8)

http://pridels-team.blogspot.com/2007/10/helm-xss-vuln.html

http://secunia.com/advisories/27080

http://www.securityfocus.com/bid/25940

https://exchange.xforce.ibmcloud.com/vulnerabilities/36962

http://pridels-team.blogspot.com/2007/10/helm-xss-vuln.html

http://secunia.com/advisories/27080

http://www.securityfocus.com/bid/25940

https://exchange.xforce.ibmcloud.com/vulnerabilities/36962

KEV Catalog EPSS Scores Vendors All CVEs