CVE Database · CVE-2007-0519
CVSS v3.1
N/A
EPSS
1.31%
Published
Jan 26, 2007
Modified
Jun 16, 2026
Public PoC / Exploit (1)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
Cross-site scripting (XSS) vulnerability in memcp.php in XMB U2U Instant Messenger allows remote authenticated users to inject arbitrary web script or HTML via the recipient field.
Weaknesses (CWE)
Affected Products (1)
References (10)