Tempinbox.com=0D =0D Homepage:=0D http://www.tempinbox.com=0D =0D Effected files:=0D checkmail.pl=0D =0D Description:=0D =0D Tempinbox.com is a free throw away, no sending email service. You enter an account name and you can instantly check email.=0D =0D XSS Vulnerability:=0D =0D It seems the title of emails and subjects are not sanatized, so if a user was to putas a title or subject of aemail, and then someone went to view it, an XSS attack could occur.