CVE-2005-1120

Multiple cross-site scripting (XSS) vulnerabilities in IlohaMail 0.8.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the e-mail (1) body, (2) filename, or (3) MIME type.

Affected Software

Name	Vendor	Start Version	End Version
Ilohamail	Ilohamail	0.7.0 (including)	0.7.0 (including)
Ilohamail	Ilohamail	0.7.1 (including)	0.7.1 (including)
Ilohamail	Ilohamail	0.7.2 (including)	0.7.2 (including)
Ilohamail	Ilohamail	0.7.3 (including)	0.7.3 (including)
Ilohamail	Ilohamail	0.7.4 (including)	0.7.4 (including)
Ilohamail	Ilohamail	0.7.4.2 (including)	0.7.4.2 (including)
Ilohamail	Ilohamail	0.7.5 (including)	0.7.5 (including)
Ilohamail	Ilohamail	0.7.6 (including)	0.7.6 (including)
Ilohamail	Ilohamail	0.7.7 (including)	0.7.7 (including)
Ilohamail	Ilohamail	0.7.8 (including)	0.7.8 (including)
Ilohamail	Ilohamail	0.7.9 (including)	0.7.9 (including)
Ilohamail	Ilohamail	0.8.6 (including)	0.8.6 (including)
Ilohamail	Ilohamail	0.8.7 (including)	0.8.7 (including)
Ilohamail	Ilohamail	0.8.8 (including)	0.8.8 (including)
Ilohamail	Ilohamail	0.8.9 (including)	0.8.9 (including)
Ilohamail	Ilohamail	0.8.10 (including)	0.8.10 (including)
Ilohamail	Ilohamail	0.8.11 (including)	0.8.11 (including)
Ilohamail	Ilohamail	0.8.12 (including)	0.8.12 (including)
Ilohamail	Ilohamail	0.8.13 (including)	0.8.13 (including)
Ilohamail	Ilohamail	0.8.14_rc1 (including)	0.8.14_rc1 (including)
Ilohamail	Ilohamail	0.8.14_rc2 (including)	0.8.14_rc2 (including)
Ilohamail	Ubuntu	dapper	*
Ilohamail	Ubuntu	devel	*
Ilohamail	Ubuntu	edgy	*
Ilohamail	Ubuntu	feisty	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2005-1120
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html

Affected Software

References