CVE-2002-1958

Cross-site scripting XSS vulnerability in kmMail 1.0, 1.0a, and 1.0b allows remote attackers to inject arbitrary web script or HTML via 1 javascript in onmouseover or other attributes in "safe" HTML tags such as the "b" tag, or 2 the Subject field...

KMMail 1.0 - E-Mail HTML Injection

KMMail 1.0 - E-Mail HTML Injection source: https://www.securityfocus.com/bid/6013/info kmMail does not sufficiently sanitize HTML and script code from the body of e-mail messages. As a result, an attacker may send a malicious message to a user of kmMail that includes arbitrary HTML and script cod...