SonicWall E-mail Security version 6.1.1 suffers from a cross site scripting vulnerability via the Host: header.