CVE:CVE-2006-2352
CNNVD:CNNVD-200605-294
IPswitch WhatsUp Professional 2006 和 WhatsUp Professional 2006 Premium存在跨站脚本攻击(XSS)漏洞。远程攻击者可以借助(1) NmConsole/Tools.asp 和(2) NmConsole/DeviceSelection.asp中的未知向量，注入任意Web脚本或HTML。
solution:Upgrade ipswitch whatsup_professional to a higher version than 2006,2006_premium,and avoid the version 2006,2006_premium