PublicDate: 2005-08-30 11:45:00 UTC Candidate: CVE-2005-2724 References: https://ubuntu.com/security/notices/USN-201-1 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2724 Description: Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 allows remote attackers to inject arbitrary web script or HTML via a file attachment that is processed by the Display feature. NOTE: the severity of this issue has been disputed by the developer. Ubuntu-Description: Notes: Priority: untriaged Discovered-by: Assigned-to: CVSS: Bugs: dapper_courier: released (0.47-13ubuntu5.1) edgy_courier: released (0.53.2-3ubuntu1) feisty_courier: released (0.53.2-3ubuntu1) devel_courier: released (0.53.2-3ubuntu1) upstream_courier: needs-triage