Vodafone Italia's webmail system suffers from a cross site scripting vulnerability that can be leveraged via an incoming email. Continue reading...