SurgeMail 1.x is susceptible to a cross site scripting attack.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33485/EXPL-A-2004-002-surgmail.txt
Source: https://packetstormsecurity.com/files/33485/Exploit-Labs-Security-Advisory-2004.2.html