CVE:CVE-2004-1669
CNNVD:CNNVD-200409-020
带有Icewarp Web Mail 5.2.7以及可能其他版本的Merak Mail Server 7.4.5存在跨站脚本（XSS）漏洞。远程攻击者借助（1）accountsettings.html的User name参数或者（2）search.html的Search string执行任意web脚本或者HTML。
solution:Upgrade icewarp web_mail to a higher version than 3.3.2,5.2.7,5.2.8,and avoid the version 3.3.2,5.2.7,5.2.8; Upgrade merak mail_server to a higher version than 7.4.5,and avoid the version 7.4.5