Citrix Metaframe Presentation Server — known CVE vulnerabilities

Every CVE whose affected-product data names Citrix Metaframe Presentation Server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2008-0356 — CVSS 10.0 (critical): Buffer overflow in the Independent Management Architecture (IMA) service in Citrix Presentation Server (MetaFrame Presentation Server) 4.5…
• CVE-2006-5821 — CVSS 7.5 (high): Heap-based buffer overflow in the IMA_SECURE_DecryptData1 function in ImaSystem.dll for Citrix MetaFrame XP 1.0 and 2.0, and Presentation…
• CVE-2008-3485 — CVSS 7.2 (high): Untrusted search path vulnerability in Citrix MetaFrame Presentation Server allows local users to gain privileges via a malicious…
• CVE-2007-0444 — CVSS 7.2 (high): Stack-based buffer overflow in the print provider library (cpprov.dll) in Citrix Presentation Server 4.0, MetaFrame Presentation Server…
• CVE-2006-3779 — CVSS 6.5 (medium): Citrix MetaFrame up to XP 1.0 Feature 1, except when running on Windows Server 2003, installs a registry key with an insecure ACL, which…
• CVE-2008-2300 — CVSS 6.5 (medium): Unspecified vulnerability in Citrix Presentation Server 4.5 and earlier, Citrix Access Essentials 2.0 and earlier, and Citrix Desktop…
• CVE-2007-3625 — CVSS 5.0 (medium): The Program Neighborhood Agent in Citrix Presentation Server Clients for 32-bit Windows before 10.100 allows remote attackers to cause a…
• CVE-2006-5861 — CVSS 5.0 (medium): The Independent Management Architecture (IMA) service (ImaSrv.exe) in Citrix MetaFrame XP 1.0 and 2.0, and Presentation Server 3.0 and 4.0…
• CVE-2002-2426 — CVSS 4.3 (medium): Cross-site request forgery (CSRF) vulnerability in Citrix Presentation Server 4.0 and 4.5, MetaFrame Presentation Server 3.0, and Access…