CVE-2006-2974

The CVE-2006-2974 entry concerns EmailArchitect Email Server (versions up to 6.1.0.5). The vulnerability is described as multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via parameters: (1) errCode and (2) uid in default.asp, and (3) dna...

CVE-2006-3108

EmailArchitect Email Server 6.1 is affected by an XSS vulnerability. An attacker can inject arbitrary JavaScript by exploiting a malformed HTML div tag where a carriage return sits between the onmouseover attribute and its value, bypassing the mail filter. This is described in multiple sources (N...