CVE:CVE-2007-1991
CNNVD:CNNVD-200704-242
CmailServer WebMail的mail/signup.asp存在跨站脚本攻击漏洞。远程攻击者可以借助评论参数，注入任意的web脚本或HTML。
solution:Upgrade youngzsoft cmailserver to a higher version than 5.4.3,and avoid the version (,5.4.3]