NuralStorm Webmail version 0.985b suffers from cross site scripting, disclosure and shell upload vulnerabilities.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/91724/nuralstorm-shellxssdisclose.txt
Source: https://packetstormsecurity.com/files/91724/NuralStorm-Webmail-Cross-Site-Scripting-Shell-Upload.html