EIP-2026-101841

This is an advisory describing multiple reflected XSS vulnerabilities in McAfee Email Gateway (formerly IronMail) version 6.7.1. The vulnerabilities are due to insufficient input sanitization in the Web Access console and require user authentication to exploit.