Cross-site scripting vulnerability (XSS) in MHonArc 2.5.12 and earlier allows remote attackers to insert script or HTML via an email message with the script in a MIME header name.

BID:6204 | URL:http://www.securityfocus.com/bid/6204 | CONFIRM:http://www.mhonarc.org/archive/cgi-bin/mesg.cgi?a=mhonarc-users&i=200210211713.g9LHDXE02256@mcguire.earlhood.com | DEBIAN:DSA-199 | URL:http://www.debian.org/security/2002/dsa-199 | OSVDB:7353 | URL:http://www.osvdb.org/7353 | XF:mhonarc-mime-header-xss(10666) | URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/10666