CVE:CVE-2006-5486
CNNVD:CNNVD-200610-394
Sun Java System Messaging Server 6.0至6.2以及iPlanet Messaging Server 5.2的Webmail中存在跨站脚本攻击漏洞，远程攻击者可以通过精心编制的消息来执行任意Javascript。
solution:Upgrade sun iplanet_messaging_server to a higher version than 5.2,and avoid the version 5.2; Upgrade sun java_system_messaging_server to a higher version than 6.0,6.1,6.2,and avoid the version 6.0,6.1,6.2