CVE-2007-2153

Name of the Vulnerable Software and Affected Versions @Mail version 5.0

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the username parameter in the atmail.php file.

Recommendations For @Mail version 5.0, consider restricting access to the atmail.php file until a patch is available, and avoid using the username parameter in this context to minimize the risk of exploitation.