CVE:CVE-2007-2590
CNNVD:CNNVD-200705-205
Nokia Intellisync Mobile Suite 可能涉及Novell Groupwise Mobile Server和Nokia Intellisync Wireless Email Express，允许远程攻击者借助一个对(1)usrmgr/userList.asp或(2)usrmgr/userStatusList.asp的直接请求，获得用户名和其他敏感信息。
solution:Upgrade nokia groupwise_mobile_server to a higher version than *; Upgrade nokia intellisync_mobile_suite to a higher version than 6.4.31.2,6.6.0.107,6.6.2.2,and avoid the version 6.4.31.2,6.6.0.107,6.6.2.2; Upgrade nokia intellisync_wireless_email_express to a higher version than *