8 results (0.010 seconds)

CVSS: 4.3EPSS: 0%CPEs: 18EXPL: 1

CVE-2006-2484

https://notcve.org/view.php?id=CVE-2006-2484

Cross-site scripting (XSS) vulnerability in index.html in IceWarp WebMail 5.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter. • http://securityreason.com/securityalert/925 http://www.securityfocus.com/archive/1/434121/100/0/threaded http://www.securityfocus.com/bid/17995 https://exchange.xforce.ibmcloud.com/vulnerabilities/26680 •

CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 1

CVE-2004-1673

https://notcve.org/view.php?id=CVE-2004-1673

accountsettings_add.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allow remote attackers to create text files with arbitrary content via the accountid parameter. • http://marc.info/?l=bugtraq&m=109483971420067&w=2 http://secunia.com/advisories/12789 http://www.securityfocus.com/bid/11371 https://exchange.xforce.ibmcloud.com/vulnerabilities/17317 •

CVSS: 7.5EPSS: 0%CPEs: 4EXPL: 0

CVE-2004-1674

https://notcve.org/view.php?id=CVE-2004-1674

viewaction.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to (1) delete arbitrary files via the originalfolder parameter or (2) move arbitrary files via the messageid parameter. • http://marc.info/?l=bugtraq&m=109483971420067&w=2 http://secunia.com/advisories/12789 http://www.securityfocus.com/bid/11371 https://exchange.xforce.ibmcloud.com/vulnerabilities/17976 •

CVSS: 5.0EPSS: 0%CPEs: 3EXPL: 1

CVE-2004-1671

https://notcve.org/view.php?id=CVE-2004-1671

Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to gain sensitive information via a direct request to (1) accountsettings_add.html or (2) topmenu.html. • http://marc.info/?l=bugtraq&m=109483971420067&w=2 http://secunia.com/advisories/12789 http://www.securityfocus.com/bid/11371 https://exchange.xforce.ibmcloud.com/vulnerabilities/17315 •

CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 1

CVE-2004-1672

https://notcve.org/view.php?id=CVE-2004-1672

attachment.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to view other users' attachments by specifying the username and message ID in an HTTP request. • http://marc.info/?l=bugtraq&m=109483971420067&w=2 http://secunia.com/advisories/12789 http://www.securityfocus.com/bid/11371 https://exchange.xforce.ibmcloud.com/vulnerabilities/17316 •