Cybozu Mailwise before 5.4.0 allows remote attackers to obtain information on when an email is read.
Cybozu Mailwise before 5.4.0 allows remote attackers to conduct clickjacking attacks.
Cybozu Mailwise before 5.4.0 allows remote attackers to obtain sensitive cookie information.
Cybozu Mailwise before 5.4.0 allows remote attackers to inject arbitrary email headers.