CVE:CVE-2006-3817
CNNVD:CNNVD-200608-189
20060727之前的Novell GroupWise WebAccess 6.5和Novell GroupWise WebAccess 7版本中具有跨站脚本攻击(XSS)漏洞，远程攻击者可借助带有UTF-7字符集的邮件消息中的编码SCRIPT元素来注入任意web脚本或HTML，如通过"+ADw-SCRIPT+AD4-"序列。
solution:Upgrade novell groupwise_webaccess to a higher version than 6.5,6.5:sp1,6.5:sp2,6.5:sp3,6.5:sp4,7,and avoid the version 6.5,6.5:sp1,6.5:sp2,6.5:sp3,6.5:sp4,7