CVE-2008-0872: SmarterTools SmarterMail Enterprise

Medium severity, CVSS 4.3. EPSS: 1.7% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in SmarterTools SmarterMail Enterprise 4.3 allows remote attackers to inject arbitrary web script or HTML via a STYLE attribute of an element in the Subject field of an e-mail message.

Affected products

• SmarterTools SmarterMail Enterprise: version 4.3 only

Published 2008-02-21. Last modified 2026-06-16.