Page 4 of 25 results (0.003 seconds)

CVSS: 2.1EPSS: 0%CPEs: 2EXPL: 0

CVE-2005-0321

https://notcve.org/view.php?id=CVE-2005-0321

MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allows remote authenticated users to gain sensitive information via an HTTP request to (1) calendar_d.html, (2) calendar_m.html, (3) calendar_w.html, or (4) calendar_y.html, which reveal the installation path. • http://marc.info/?l=bugtraq&m=110693950205007&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/19152 •

CVSS: 5.0EPSS: 2%CPEs: 1EXPL: 2

CVE-2005-0320 – IceWarp Web Mail 5.3 - 'accountsettings_add.html?accountid' Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2005-0320

Multiple cross-site scripting vulnerabilities in MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter to login.html, (2) accountid parameter to accountsettings_add.html, or the (3) note, (4) title, and (5) location fields to calendar.html. • https://www.exploit-db.com/exploits/25069 https://www.exploit-db.com/exploits/25068 http://marc.info/?l=bugtraq&m=110693950205007&w=2 http://www.securityfocus.com/bid/12396 https://exchange.xforce.ibmcloud.com/vulnerabilities/19147 •

CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 1

CVE-2004-1673

https://notcve.org/view.php?id=CVE-2004-1673

accountsettings_add.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allow remote attackers to create text files with arbitrary content via the accountid parameter. • http://marc.info/?l=bugtraq&m=109483971420067&w=2 http://secunia.com/advisories/12789 http://www.securityfocus.com/bid/11371 https://exchange.xforce.ibmcloud.com/vulnerabilities/17317 •

CVSS: 7.5EPSS: 0%CPEs: 4EXPL: 0

CVE-2004-1674

https://notcve.org/view.php?id=CVE-2004-1674

viewaction.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to (1) delete arbitrary files via the originalfolder parameter or (2) move arbitrary files via the messageid parameter. • http://marc.info/?l=bugtraq&m=109483971420067&w=2 http://secunia.com/advisories/12789 http://www.securityfocus.com/bid/11371 https://exchange.xforce.ibmcloud.com/vulnerabilities/17976 •

CVSS: 5.0EPSS: 0%CPEs: 3EXPL: 1

CVE-2004-1671

https://notcve.org/view.php?id=CVE-2004-1671

Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to gain sensitive information via a direct request to (1) accountsettings_add.html or (2) topmenu.html. • http://marc.info/?l=bugtraq&m=109483971420067&w=2 http://secunia.com/advisories/12789 http://www.securityfocus.com/bid/11371 https://exchange.xforce.ibmcloud.com/vulnerabilities/17315 •