CVE-2007-6138
SQL injection vulnerability in redir.asp in VU Mass Mailer allows remote attackers to execute arbitrary SQL commands via the password parameter to Default.asp (aka the Login Page). NOTE: some of these details are obtained from third party information.
Date published : 2007-11-27
http://www.securityfocus.com/bid/26522
http://www.securityfocus.com/archive/1/484021/100/0/threaded