Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in MailEnable Enterprise 6.5 allow remote attackers to inject arbitrary web script or HTML via the 1 From, 2 To, or 3 Subject header or 4 body in an SMTP e-mail message...

CVE-2012-2588

CVE-2012-2588 is an XSS vulnerability in MailEnable Enterprise 6.5. The issue allows remote attackers to inject arbitrary web script or HTML via SMTP message fields (From, To, Subject) or the message body, exploiting malformed headers/body to execute scripts in a user’s context. Public references...

MailEnable Enterprise 6.5 Cross Site Scripting

!/usr/bin/python ''' Author: loneferret of Offensive Security Product: MailEnable Enterprise Version: 6.5 Vendor Site: http://www.mailenable.com Software Download: http://www.mailenable.com/download.asp Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012: Response received from CERT...