CVE-2006-3108

Cross-site scripting XSS vulnerability in EmailArchitect Email Server 6.1 allows remote attackers to inject arbitrary Javascript via an HTML div tag with a carriage return between the onmouseover attribute and its value, which bypasses the mail filter...

EUVD-2012-2577

Malware in sbrugna...

EUVD-2006-2971

Malware in sbrugna...

EUVD-2006-3105

Malware in sbrugna...

CVE-2012-2591: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in EmailArchitect Email Server 10.0 and 10.0.0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 From or 2 Date field in an email...

CVE-2006-3108

EmailArchitect Email Server 6.1 is affected by an XSS vulnerability. An attacker can inject arbitrary JavaScript by exploiting a malformed HTML div tag where a carriage return sits between the onmouseover attribute and its value, bypassing the mail filter. This is described in multiple sources (N...

CVE-2006-3108: Undefined Security Weakness

Cross-site scripting XSS vulnerability in EmailArchitect Email Server 6.1 allows remote attackers to inject arbitrary Javascript via an HTML div tag with a carriage return between the onmouseover attribute and its value, which bypasses the mail filter...

CVE-2006-2974

Multiple cross-site scripting XSS vulnerabilities in EmailArchitect Email Server 6.1.0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 errCode and 2 uid parameter in a default.asp and 3 dname parameter in b /admin/dns.asp and c /additional/regdomaindone.asp...

CVE-2006-2974

The CVE-2006-2974 entry concerns EmailArchitect Email Server (versions up to 6.1.0.5). The vulnerability is described as multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via parameters: (1) errCode and (2) uid in default.asp, and (3) dna...

CVE-2006-2974: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in EmailArchitect Email Server 6.1.0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 errCode and 2 uid parameter in a default.asp and 3 dname parameter in b /admin/dns.asp and c /additional/regdomaindone.asp...