Totemomail versions 4.x and 5.x suffer from filter bypass and script insertion vulnerabilities. Continue reading...