Cross-site request forgery (CSRF) vulnerability in Novell GroupWise WebAccess 6.5x 7.0 7.01 7.02x 7.03 7.03HP1a and 8.0 allows remote attackers to insert e-mail forwarding rules and modify unspecified other configuration settings as arbitrary users via unknown vectors.