CVE-2002-1434
Multiple cross-site scripting (XSS) vulnerabilities in the Web mail module of Kerio MailServer 5.0 allow remote attackers to execute HTML script as other users via certain URLs.
Date published : 2003-03-18
http://www.securityfocus.com/bid/5507
http://archives.neohapsis.com/archives/bugtraq/2002-08/0183.html