Ability Mail Server 1.x is susceptible to a cross site scripting flaw and a denial of service vulnerability.