Launchpad.net

CVE 2015-9280

MailEnable before 8.60 allows XXE via an XML document in the request.aspx Options parameter.

See the CVE page on Mitre.org for more details.