Secunia

Multiple vulnerabilities have been reported in Symantec Clientless VPN Gateway 4400 Series, where some have an unknown impact and others can be exploited to conduct cross-site scripting attacks or manipulate users' signon information.

1) Various unspecified vulnerabilities affect the ActiveX and HTML file browsers.

2) Various unspecified input validation errors within the end user UI can be exploited to conduct cross-site scripting attacks.

3) An error within the end user UI can be exploited by malicious users to manipulate other users' signon information (including username and password).

Solution
A hotfix is available:
Further details available in Customer Area

Provided and/or discovered by
Reported by vendor.

Changelog
Further details available in Customer Area

Original Advisory
http://www.sarc.com/avcenter/security/Content/2004.08.13.html
ftp://ftp.symantec.com/public/english_us_canada/products/sym_clientless_vpn/sym_clientless_vpn_5/updates/hf3-readme.txt

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area