3 results (0.003 seconds)

CVSS: 4.3EPSS: 0%CPEs: 18EXPL: 1

CVE-2006-2484

https://notcve.org/view.php?id=CVE-2006-2484

Cross-site scripting (XSS) vulnerability in index.html in IceWarp WebMail 5.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter. • http://securityreason.com/securityalert/925 http://www.securityfocus.com/archive/1/434121/100/0/threaded http://www.securityfocus.com/bid/17995 https://exchange.xforce.ibmcloud.com/vulnerabilities/26680 •

CVSS: 7.2EPSS: 0%CPEs: 4EXPL: 0

CVE-2005-0322

https://notcve.org/view.php?id=CVE-2005-0322

MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 and Mail Server 7.6.4r with Icewarp Mail Server 5.3.2 uses weak encryption in the (1) users.cfg, (2) settings.cfg, (3) users.dat or (4) user.dat files, which allows local users to extract the passwords. • http://marc.info/?l=bugtraq&m=110693950205007&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/19153 •

CVSS: 2.1EPSS: 0%CPEs: 2EXPL: 0

CVE-2005-0321

https://notcve.org/view.php?id=CVE-2005-0321

MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allows remote authenticated users to gain sensitive information via an HTTP request to (1) calendar_d.html, (2) calendar_m.html, (3) calendar_w.html, or (4) calendar_y.html, which reveal the installation path. • http://marc.info/?l=bugtraq&m=110693950205007&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/19152 •