CVE:CVE-2005-1120
CNNVD:CNNVD-200505-519
IlohaMail 0.8.14及更早版本存在多个跨站脚本攻击(XSS)漏洞，远程攻击者可以通过电子邮件(1)正文，(2)文件名或(3)MIME类型注入任意Web脚本或HTML。
solution:Upgrade ilohamail ilohamail to a higher version than 0.7.0,0.7.1,0.7.2,0.7.3,0.7.4,0.7.4.2,0.7.5,0.7.6,0.7.7,0.7.8,0.7.9,0.8.6,0.8.7,0.8.8,0.8.9,0.8.10,0.8.11,0.8.12,0.8.13,0.8.14_rc1,0.8.14_rc2,and avoid the version 0.7.0,0.7.1,0.7.2,0.7.3,0.7.4,0.7.4.2,0.7.5,0.7.6,0.7.7,0.7.8,0.7.9,0.8.6,0.8.7,0.8.8,0.8.9,0.8.10,0.8.11,0.8.12,0.8.13,0.8.14_rc1,0.8.14_rc2