Compaq Insight Management Agent vulnerabilities

CVE-2002-2422 [MEDIUM] CWE-79 CVE-2002-2422: Cross-site scripting (XSS) vulnerability in Compaq Insight Management Agents 2.0, 2.1, 3.6.0, 4.2 an Cross-site scripting (XSS) vulnerability in Compaq Insight Management Agents 2.0, 2.1, 3.6.0, 4.2 and 4.3.7 allows remote attackers to inject arbitrary web script or HTML via a URL, which inserts the script into the resulting error message.

CVE-2001-0134 [CRITICAL] CVE-2001-0134: Buffer overflow in cpqlogin.htm in web-enabled agents for various Compaq management software product Buffer overflow in cpqlogin.htm in web-enabled agents for various Compaq management software products such as Insight Manager and Management Agents allows remote attackers to execute arbitrary commands via a long user name.

CVE-1999-1355 [HIGH] CVE-1999-1355: BMC Patrol component, when installed with Compaq Insight Management Agent 4.23 and earlier, or Manag BMC Patrol component, when installed with Compaq Insight Management Agent 4.23 and earlier, or Management Agents for Servers 4.40 and earlier, creates a PFCUser account with a default password and potentially dangerous privileges.