AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2004-2704

MEDIUM · CVSS 4.3 EPSS 4.73%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2004-12-31 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2004-2704
Severity
MEDIUM
CVSS
4.3
EPSS
4.73%

Original Filing — NVD Description

Hastymail 1.0.1 and earlier (stable) and 1.1 and earlier (development) does not send the "attachment" parameter in the Content-Disposition field for attachments, which causes the attachment to be rendered inline by Internet Explorer when the victim clicks the download link, which facilitates cross-site scripting (XSS) and possibly other attacks.