CVE-2016-4868

Cybozu Office 9.0.0 through 10.4.0 allows remote attackers to inject arbitrary email headers.