ESA-2014-060: EMC Documentum eRoom Multiple Cross-Site Scripting
--_002_37F0BE0896DB1544B5BEFBE34F79D0534F930D27MX103CL01corpem_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
--_002_37F0BE0896DB1544B5BEFBE34F79D0534F930D27MX103CL01corpem_
Content-Type: text/plain; name="ESA-2014-060.txt"
Content-Description: ESA-2014-060.txt
Content-Disposition: attachment; filename="ESA-2014-060.txt"; size=3294;
creation-date="Mon, 30 Jun 2014 14:12:58 GMT";
modification-date="Mon, 30 Jun 2014 19:39:00 GMT"
Content-Transfer-Encoding: base64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--_002_37F0BE0896DB1544B5BEFBE34F79D0534F930D27MX103CL01corpem_--