CVE-2013-6017: Atmail

Medium severity, CVSS 4.3. EPSS: 4.4% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Atmail Webmail Server before 7.2 allows remote attackers to inject arbitrary web script or HTML via the body of an e-mail message, as demonstrated by the SRC attribute of an IFRAME element.

Affected products

• Atmail Atmail: up to and including 7.1.6; version 6.3.0 only; version 6.3.1 only; version 6.3.2 only; version 6.3.3 only; version 6.3.4 only; …

Published 2014-01-12. Last modified 2026-06-16.