I'm curious if there is a way to execute XSS via email.
I am not talking about using e-mail as a way to deliver a link that has reflected XSS in it.
The first answer talks about sending an email from example.com to a user of gmail.com that could be used to attack gmail.com. It also mentions problems in Thunderbird but doesn't clarify if those would allow attacks on example.com (i.e. the origin of the mails) or somewhere else.