Visit our newest sister site!
Hundreds of free aircraft flight manuals
Civilian • Historical • Military • Declassified • FREE!


TUCoPS :: Security App Flaws :: b06-1376.htm

McAfee WebShield SMTP Format String Vulnerability



SYMSA-2006-002: McAfee WebShield SMTP Format String Vulnerability
SYMSA-2006-002: McAfee WebShield SMTP Format String Vulnerability


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TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH