A Cross Site Scripting vulnerability has been found in MyNewsGroups, which is a webbased service used to read USENET postings.

The Subject header is not properly verified, thus an attacker may create a malicious subject line, post it to a news group and use it to hijack MyNewsGroup user accounts.

Solution
There is no patch or update available from the vendor. If this issue is critical to your security, we suggest that you either change the source code yourself or choose another mean of reading USENET messages.
Further details available to Secunia VIM customers

Provided and/or discovered by
Ulf Harnhammar, VSU Security

Deep Links
Links available to Secunia VIM customers