7.5
CVSS
CVE-2001-0857
Exploit Found
Cross-site scripting vulnerability in status.php3 in Imp Webmail 2.2.6 and earlier allows remote attackers to gain access to the e-mail of other users by hijacking session cookies via the message parameter.
Severity: HIGH