CVE-2002-1307: Mhonarc

Medium severity, CVSS 6.8. EPSS: 4% chance of exploitation in the next 30 days.

Cross-site scripting vulnerability (XSS) in MHonArc 2.5.12 and earlier allows remote attackers to insert script or HTML via an email message with the script in a MIME header name.

Affected products

• Mhonarc Mhonarc: version 2.4.4 only; version 2.5.2 only; version 2.5.12 only

Published 2002-11-29. Last modified 2026-06-16.