CVE-2008-1226

Zimbra Collaboration Suite (ZCS) versions 4.0.3 and 4.5.6 (and possibly earlier than 4.5.10) are affected by multiple XSS flaws that allow an attacker to inject arbitrary script via specially crafted email attachments (notably .jpg or .gif). The issue is a client-side vulnerability in which a rem...