UDID version 1.0 suffers from a persistent mail encoding vulnerability that allows for script injection.