Security dotCMS Email Header Injection May 25, 2016 007admin dotCMS versions prior to 3.5 and 3.3.2 suffers from an email header injection vulnerability.