Cross-site scripting vulnerability in status.php3 in Imp Webmail 2.2.6 and earlier allows remote attackers to gain access to the e-mail of other users by hijacking session cookies via the message parameter.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Webmail | Imp | * | 2.2.6 (including) |