CVE

Id
10097  
CVE No.
CVE-2004-1669  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in MERAK Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to execute arbitrary web script or HTML via the (1) User name parameter to accountsettings.html or (2) Search string parameter to search.html.  
Phase
Assigned (20050221)  
Votes
None (candidate not yet proposed)  
Comments