CVE-2012-2587

CVE-2012-2587 affects AfterLogic MailSuite Pro 6.3. The connected documents confirm multiple cross-site scripting (XSS) vulnerabilities where an attacker can inject arbitrary web script or HTML via an e-mail message body by crafting a SRC attribute on (1) an IFRAME or (2) a SCRIPT element. This i...