nymail.spray.se XSS vulnerability

Vulnerable URL: http://nymail.spray.se/feedbacknocookie.asp?Disabled=1"...