Author: Cyberthreat Blog

Cross-site scripting (XSS) vulnerability in the “New appointment” function in Cybozu Garoon before 4.2.2.

DMMFX Trade for Android 1.5.0 and earlier, DMMFX DEMO Trade for Android 1.5.0 and earlier, and GAITAMEJAPAN FX Trade for Android 1.4.0 and earlier do not verify SSL certificates.

SQL injection vulnerability in Cybozu Garoon before 4.2.2.

Cross-site scripting (XSS) vulnerability in the “Check available times” function in Cybozu Garoon before 4.2.2.

Cybozu Mailwise before 5.4.0 allows remote attackers to obtain sensitive cookie information.