Description
Stored cross-site scripting vulnerability exists in CGIs included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| A.K.I Software | pmc.exe | 2.5.1.720 and earlier | — |
| A.K.I Software | pmam.exe | 2.5.1.1411 and earlier | — |
| A.K.I Software | pmum.exe (Standard edition) | 2.5.1.25451 and earlier | — |
| A.K.I Software | pmum.exe (Pro edition) | 2.5.1.25452 and earlier | — |
| A.K.I Software | pmum.exe (Standard + IMAP4 edition) | 2.5.1.25453 and earlier | — |
| A.K.I Software | pmum.exe (Pro + IMAP4 edition / Enterprise edition) | 2.5.1.25454 and earlier | — |