Cross-site request forgery (CSRF) vulnerability in the communicate function in estmaster.c for Hyper Estraier before 1.3.3 allows remote attackers to perform unauthorized actions as other users via unknown vectors.Referenceshttp://sourceforge.net/project/shownotes.php?release_id=432119http://secunia.com/advisories/21049http://www.vupen.com/english/advisories/2006/2827