Mailman versions 1.x up through 2.1.23 suffer from a cross site scripting vulnerability.
3acd354767ea65719c08384106b042f59668c91d3587059546459b8bc4c33aa3
Mailman version 2.1.8 suffers from cross site scripting and log file injection vulnerabilities.
40bdec7e01b7583e1c4f60c05ebc6fef3a41a83fc2273667a7a4ec8f8c53d1af
An unspecified vulnerability in Mailman versions 2.1.4 and below allow for malicious attackers to retrieve members' passwords.
d93d0fd773be8e5e62c7acbccec1ae4f85da4d7dd8ac94bd2a34545fc912a747