Crossite scripting on MS Office and EML documents viewing.
vulners.com/securityvulns/securityvulns:doc:30165
vulners.com/securityvulns/securityvulns:doc:30243
vulners.com/securityvulns/securityvulns:doc:30379
vulners.com/securityvulns/securityvulns:doc:30382