CVE

Id
9019  
CVE No.
CVE-2004-0591  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the print_header_uc function for SqWebMail 4.0.4 and earlier, and possibly 3.x, allows remote attackers to inject arbitrary web script or HRML via (1) e-mail headers or (2) a message with a "message/delivery-status" MIME Content-Type.  
Phase
Assigned (20040623)  
Votes
None (candidate not yet proposed)  
Comments