CVE-2003-0992
Cross-site scripting (XSS) vulnerability in the create CGI script for Mailman before 2.1.3 allows remote attackers to steal cookies of other users.
Date published : 2004-01-15
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000842
http://mail.python.org/pipermail/mailman-announce/2003-September/000061.html