Cybozu Office 10.0.0 to 10.7.0 allow remote malicious users to display an image located in an external server via unspecified vectors.
cybozu office