CVE-2006-3095: Ipostmx 2005

Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in iPostMX 2005 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the RETURNURL parameter in (1) userlogin.cfm and (2) account.cfm.

Affected products

• Ipostmx Ipostmx 2005: up to and including 2.0

Published 2006-06-19. Last modified 2026-06-16.