The "Scheduler" function in Cybozu Garoon prior to 4.2.2 allows remote malicious users to redirect users to arbitrary websites.
cybozu garoon