The host is running Hastymail2 and is prone to cross-site scripting vulnerability.

Successful exploitation will allow attackers to execute arbitrary web script or HTML in a user's browser session in the context of an affected site. Impact Level: Application

Upgrade to the Hastymail2 1.01 or later For updates refer to http://www.hastymail.org/blogs/News/

The flaw is caused by improper validation of crafted background attribute within a cell in a TABLE element which allows remote attackers to inject arbitrary web script or HTML.

Hastymail2 version prior to 1.01

• http://openwall.com/lists/oss-security/2011/01/05/3
• http://openwall.com/lists/oss-security/2011/01/06/14
• http://www.hastymail.org/security/

---

Updated on 2015-03-25