Debian Security Advisory 168201 - Ivan Markovic discovered that SquirrelMail, a webmail application, did not sufficiently sanitise incoming HTML email, allowing an attacker to perform cross site scripting through sending a malicious HTML email.
b37e6d28638f92ee2556f72ac25b124f3a8848d6bb63479f35654cda8a3da5b7