The Commtouch Anti-Spam Enterprise Gateway solution suffers from a reflected cross site scripting vulnerability.