Masaki Yoshikawa

The issue allows remote attackers to execute arbitrary OS commands via specially crafted mail templates.

The issue allows remote attackers to redirect users to arbitrary web sites, potentially leading to phishing attacks. This is achieved via unspecified vectors.

A CRLF injection issue allows remote attackers to inject arbitrary HTTP headers via unspecified vectors.

A cross-site scripting (XSS) issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

The issue allows remote attackers to conduct clickjacking attacks via unspecified vectors.

The issue allows remote authenticated users to execute arbitrary OS commands.

A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of victims via unknown vectors.