Vulnerabilities > Atmail > Atmail Webmail > 4.11

DATE CVE VULNERABILITY TITLE RISK
2007-02-15 CVE-2007-0953 HTML Injection vulnerability in @Mail Search.HTML
Cross-site scripting (XSS) vulnerability in search.pl in @Mail 4.61 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.
network
atmail
4.3
2006-12-23 CVE-2006-6702 Cross-Site Scripting vulnerability in Atmail Webmail
Cross-site scripting (XSS) vulnerability in Global.pm in @Mail before 4.61 allows remote attackers to inject arbitrary web script or HTML via crafted e-mail messages.
network
atmail
6.8