CVE-2006-3305: Multiple cross-site scripting (XSS) vulnerabilities in UebiMiau Webmail 2.7.10, and 2.7.2 and earlier allow...

Security readout for executives and security teams

This is an old cross-site scripting issue in UebiMiau Webmail. If a vulnerable webmail instance is still in use, an attacker could inject script or HTML through specific request parameters, potentially affecting users who interact with maliciously crafted content or links. Exposure is limited to organizations still running UebiMiau Webmail 2.7.10, 2.7.2, or earlier, especially internet-facing deployments. The bundle does not identify broader affected products or CPEs. Handle as a legacy webmail exposure review. It is not KEV-listed in the provided data, but webmail XSS can create account and trust risks if an old public instance remains online. Mitigation focus: Identify whether UebiMiau Webmail is still deployed anywhere in the environment.; Check vendor or archived advisory guidance for fixed versions or official remediation.; Retire or replace unsupported legacy webmail deployments where feasible..

Prepared

Jun 29, 2026, 11:51 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.