Multiple security vulnerabilities were discovered in the SOGo groupware server, which could result in cross-site scripting, shell injection, password reset poisoning or SQL injection. https://security-tracker.debian.org/tracker/DSA-6561-1