Some vulnerabilities have been reported in Palm Pre WebOS, where one vulnerability can be exploited to conduct script insertion attacks while others have unknown impacts.

1) Certain input via emails is not properly sanitised before being used. This can be exploited to execute arbitrary HTML and script code, which can be used to e.g. disclose local files.

2) Some vulnerabilities are caused due to unspecified errors. No further information is currently available.

The vulnerabilities are reported in versions prior to 1.2.0.

Solution
Update to version 1.2.0.

Provided and/or discovered by
1) Townsend Ladd Harris
2) Reported by the vendor and Townsend Ladd Harris.

Changelog
Further details available to Secunia VIM customers

Original Advisory
Palm:
http://kb.palm.com/wps/portal/kb/na/pre/p100eww/sprint/solutions/article/50607_en.html#12

Townsend Ladd Harris:
http://tlhsecurity.blogspot.com/2009/10/palm-pre-webos-11-remote-file-access.html

Deep Links
Links available to Secunia VIM customers