@XSSExploits posted a proof of concept XSS vulnerability in Comodo's SMIME Certificate Retrieval page.