mailman

Several security related problems have been discovered in mailman, the
web-based GNU mailing list manager. The Common Vulnerabilities and
Exposures project identifies the following problems:

• CVE-2006-3636
  Moritz Naumann discovered several cross-site scripting problems
  that could allow remote attackers to inject arbitrary web script code
  or HTML.
• CVE-2006-4624
  Moritz Naumann discovered that a remote attacker can inject
  arbitrary strings into the logfile.

For the stable distribution (sarge) these problems have been fixed in
version 2.1.5-8sarge5.

For the unstable distribution (sid) these problems have been fixed in
version 2.1.8-3.

We recommend that you upgrade your mailman package.