I've done as this. Yes, is putting there the email address and the password. but the password ins not shown in plain text..
there is a possible scenario.. I'm in an Icaffe, check my email, logout, leave that Iexplore page open when I leave and someone come after me and put that javascript.. still, if somewhere somehow the password appears in plain text.. no, to x-files scenario -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Norman J. Nolasco Sent: Thursday, July 25, 2002 2:21 PM To: [EMAIL PROTECTED] Subject: RE: [IMail Forum] Bug and SECURITY issue on Imail7 (Webmail) > I tried it, and get nothing but a little popup box with a question > mark in it. You have to check: "Remember userid & password (not recommended if you share this computer)" Then, log in. Log out. Then put javascript:alert(document.cookie) in the address field in the browser. I think this is more of a feature than a bug. I think may be more of a problem if you have IMail calendaring turned on. I forgot how it works, but I think the cookie is stored whether or not you check the "Remember" box at the login screen. -Norm Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Please visit the Knowledge Base for answers to frequently asked questions: http://www.ipswitch.com/support/IMail/ Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Please visit the Knowledge Base for answers to frequently asked questions: http://www.ipswitch.com/support/IMail/
