
CVE-2013-5033
https://notcve.org/view.php?id=CVE-2013-5033
12 Jan 2014 — Unspecified vulnerability in Atmail before 6.6.4, and 7.x before 7.1.2, has unknown impact and attack vectors, a different vulnerability than CVE-2013-5031, CVE-2013-5032, and CVE-2013-5034. Vulnerabilidad no especificada en Atmail anteriores a 6.6.4, y 7.x anteriores a 7.1.2, tienen un impacto y vectores de ataque no especificados, una vulnerabilidad diferente a CVE-2013-5031, CVE-2013-5032, y CVE-2013-5034. • http://atmail.com/changelog •

CVE-2013-6017 – Atmail Webmail Server - Email Body HTML Injection
https://notcve.org/view.php?id=CVE-2013-6017
12 Jan 2014 — Cross-site scripting (XSS) vulnerability in Atmail Webmail Server before 7.2 allows remote attackers to inject arbitrary web script or HTML via the body of an e-mail message, as demonstrated by the SRC attribute of an IFRAME element. Vulnerabilidad de cross-site scripting (XSS) en Atmail Webmail Server anteriores a 7.2 permite a atacantes remotos inyectar script web o HTML de forma arbitraria a través del cuerpo de un mensaje de email, como fue demostrado con el atributo SRC en un elemento IFRAME. • https://www.exploit-db.com/exploits/39015 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVE-2013-6028
https://notcve.org/view.php?id=CVE-2013-6028
12 Jan 2014 — Multiple cross-site request forgery (CSRF) vulnerabilities in Atmail Webmail Server before 7.2 allow remote attackers to hijack the authentication of administrators for requests that (1) add user accounts, (2) modify user accounts, (3) delete user accounts, or (4) stop the product's service. Múltiples vulnerabilidades cross-site request forgery (CSRF) en Atmail Webmail Server anteriores a 7.2 permite a atacantes remotos secuestrar la autenticación de administradores para peticiones que (1) añaden cuentas de... • http://atmail.com/changelog • CWE-352: Cross-Site Request Forgery (CSRF) •