CVE-2007-4172

Open WebMail (OWM) 2.52 20060831 and earlier contains multiple cross-site scripting (XSS) vulnerabilities. The issue affects the following scripts and parameters: openwebmail-main.pl (searchtype, longpage, page); openwebmail-prefs.pl (prefs_caller, userfirsttime, page, sort, folder, message_id); ...