CVE-2009-4352

TransWARE Active! mail 2003 contains cross-site scripting (XSS) vulnerabilities in builds 2003.0139.0871 and earlier (and possibly other versions before 2003.0139.0939). The flaw allows remote attackers to inject arbitrary web script or HTML via the From, To, Cc, and Bcc fields, potentially execu...