CVE-2007-2825

Multiple cross-site scripting (XSS) vulnerabilities in ReadMsg.php in @Mail 5.02 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving (1) links and (2) images.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2007-05-22

Last modified

2024-08-07

Affected products

• Atmail Webmail (Atmail)

References

• http://osvdb.org/36826
• http://secunia.com/advisories/25506
• http://terra.calacode.com/mail/docs/changelog.html
• http://www.securityfocus.com/bid/24260
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34376