CVE-2006-4570: Mozilla Seamonkey

Low severity, CVSS 2.6. EPSS: 2.4% chance of exploitation in the next 30 days.

Mozilla Thunderbird before 1.5.0.7 and SeaMonkey before 1.0.5, with "Load Images" enabled, allows remote user-assisted attackers to bypass settings that disable JavaScript via a remote XBL file in a message that is loaded when the user views, forwards, or replies to the original message.

Affected products

• Mozilla Seamonkey: up to and including 1.0.4
• Mozilla Thunderbird: up to and including 1.5.0.6

Published 2006-09-15. Last modified 2026-06-16.