Mail2World v12 Business Control Center was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the Usr parameter at resellercenter/login.asp.
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')