CVE-2006-3817

CVE-2006-3817 is a cross-site scripting (XSS) vulnerability in Novell GroupWise WebAccess 6.5 and 7 prior to 20060727. The issue arises from improper handling of user-supplied input in email content encoded with UTF-7, allowing an attacker to inject and execute arbitrary script via a SCRIPT eleme...