Secunia Security Advisory – Microsoft has released an update for Exchange Server 5.5 SP4. This fixes a vulnerability, allowing malicious people to conduct script insertion attacks. The vulnerability is caused due to an input validation error in a HTML redirection query. This can be exploited to execute arbitrary HTML and script code in a user’s browser session in context of an affected website when a malicious entry is viewed. This vulnerability affects Microsoft Exchange 5.5 with Service Pack 4.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/34011/sa12261.txt
Source: https://packetstormsecurity.com/files/34011/Secunia-Security-Advisory-12261.html