Positive Software Sitestudio — known CVE vulnerabilities

Every CVE whose affected-product data names Positive Software Sitestudio, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2007-2633 — CVSS 10.0 (critical): Directory traversal vulnerability in H-Sphere SiteStudio 1.6 allows remote attackers to read, or include and execute, arbitrary local files…
• CVE-2008-1049 — CVSS 10.0 (critical): Unspecified vulnerability in Parallels SiteStudio before 1.7.2, and 1.8.x before 1.8b, as used in Parallels H-Sphere 3.0 before Patch 9 and…
• CVE-2005-1605 — CVSS 6.8 (medium): Cross-site scripting (XSS) vulnerability in the guestbook for SiteStudio 1.6 allows remote attackers to inject arbitrary web script or HTML…