CVE-2012-2591: Emailarchitect Email Server

Medium severity, CVSS 4.3. EPSS: 2% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in EmailArchitect Email Server 10.0 and 10.0.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) From or (2) Date field in an email.

Affected products

• Emailarchitect Emailarchitect Email Server: version 10.0 only; version 10.0.0.3 only

Published 2014-06-20. Last modified 2026-06-16.