Argosoft mail server pro 1.8.7.6 (maybe others) are vulnerable to a cross-site scripting attack due to the mail server not filtering out some HTML tags in email messages.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/37823/ss-22042005-04.txt
Source: https://packetstormsecurity.com/files/37823/ss-22042005-04.txt.html