Multiple vulnerabilities were found in CMailServer’s Web Mail service including buffer overflow, SQL Injection and Cross-Site Scripting (XSS) flaws. CMailServer version 5.2 on English Win2K IIS 5.0 was tested.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/35169/cmailserver52.txt
Source: https://packetstormsecurity.com/files/35169/cmailserver52.txt.html