CVE-2012-2578

CVE-2012-2578 affects SmarterMail 9.2 with multiple XSS vectors in email bodies: (1) JavaScript alert via fromCharCode, (2) SCRIPT elements, (3) CSS expression in STYLE, (4) innerHTML in XML. Impact: remote attacker can inject arbitrary web script/HTML. No remediation details provided in the supp...