CVE-2002-1434

Multiple cross-site scripting (XSS) vulnerabilities in the Web mail module of Kerio MailServer 5.0 allow remote attackers to execute HTML script as other users via certain URLs.

Date published : 2003-03-18

http://www.securityfocus.com/bid/5507

http://archives.neohapsis.com/archives/bugtraq/2002-08/0183.html