Multiple unspecified vulnerabilities in the Control Center in Symantec Brightmail Gateway Appliance before 8.0.1 allow remote authenticated users to gain privileges, and possibly obtain sensitive information or hijack sessions of arbitrary users, via vectors involving (1) administrative scripts or (2) console functions.
https://exchange.xforce.ibmcloud.com/vulnerabilities/50075
http://www.vupen.com/english/advisories/2009/1155
http://www.securityfocus.com/bid/34639
http://securitytracker.com/id?1022117