CVE-2005-2863

OpenWebMail contains an XSS vulnerability CVE-2005-2863 in the openwebmail-main.pl script (sessionid parameter) affecting OpenWebMail 2.41. The flaw allows remote injection of arbitrary web script/HTML. NVD notes a CVSS v2 base score of 4.3 (Medium) with network access, no authentication, and par...