1st Class mail server 4.01 suffers from a directory traversal and cross site scripting vulnerabilities.