A Cross Site Scripting (CSS or XSS) vulnerability in the Sun Java System Messaging Server may allow an unprivileged remote user the ability to execute arbitrary JavaScript commands in a client user's Internet Explorer web browser. This may allow the remote user to steal cookie information, hijack sessions, or cause a loss of data privacy.

Additional information about cross-site scripting and web script vulnerabilities can be found at the following URLs:

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5653