CVE:CVE-2005-1488
CNNVD:CNNVD-200505-966
Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2存在多个跨站脚本攻击(XSS)漏洞，远程认证用户可以通过(1)传给address.html的电子邮件地址、备注或公共证书字段，(2)addressaction.html，(3)传给settings.html的签名字段，或者(4)传给calendarsettings.html的Shared calendars，来注入任意Web脚本或HTML。
solution:Upgrade icewarp web_mail to a higher version than 5.4.2,and avoid the version 5.4.2; Upgrade merak mail_server to a higher version than 8.0.3,and avoid the version 8.0.3