Multiple cross-site scripting (XSS) vulnerabilities in IlohaMail 0.8.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the e-mail (1) body, (2) filename, or (3) MIME type.
http://secunia.com/advisories/14957
http://secunia.com/advisories/19266
http://securitytracker.com/id?1013701
http://www.debian.org/security/2006/dsa-1010
Source: MITRE
Published: 2005-05-02
Updated: 2017-07-11
Type: NVD-CWE-Other
Base Score: 4.3
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Impact Score: 2.9
Exploitability Score: 8.6
Severity: MEDIUM