CVE-2012-2585

CVE-2012-2585 affects ManageEngine ServiceDesk Plus 8.1. The vulnerability is an XSS issue allowing remote attackers to inject arbitrary script/HTML via crafted email messages (body or subject) containing elements such as SCRIPT, CSS expressions, IFRAME SRC, CONTENT attribute of HTTP-EQUIV="refre...