A vulnerability in the SonicWall Email Security version 10.0.9.x allows an malicious user to create an administrative account by sending a crafted HTTP request to the remote host.