CVE:CVE-2007-5891
CNNVD:CNNVD-200711-096
ManageEngine OpManager MSP Edition和OpManager 7.0版本的jsp/Login.do中存在多个跨站脚本攻击漏洞。远程攻击者可以借助 (1) requestid, (2) fileid, (3) woMode,和(2) woID参数，注入任意web脚本或HTML。
solution:Upgrade manageengine opmanager to a higher version than 7.0,and avoid the version 7.0; Upgrade manageengine opmanager_msp to a higher version than *