CVE:CVE-2010-0817
CNNVD:CNNVD-201004-484
SharePoint Server是一个服务器功能集成套件，提供全面的内容管理和企业搜索，加速共享业务流程并简化跨界限信息共享。
Microsoft SharePoint Server 2007 12.0.0.6421的_layouts/help.aspx中存在跨站脚本攻击漏洞。远程攻击者可借助cid0参数注入任意web脚本或HTML。
solution:Upgrade microsoft sharepoint_server to a higher version than 2007,and avoid the version 2007; Upgrade microsoft sharepoint_services to a higher version than 3.0:sp1,3.0:sp2,and avoid the version 3.0:sp1,3.0:sp2