CVSS: 6.1EPSS: 0%CPEs: 14EXPL: 0CVE-2005-2724
https://notcve.org/view.php?id=CVE-2005-2724
29 Aug 2005 — Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 allows remote attackers to inject arbitrary web script or HTML via a file attachment that is processed by the Display feature. NOTE: the severity of this issue has been disputed by the developer. • http://marc.info/?l=bugtraq&m=112490698219531&w=2 •
CVSS: 7.5EPSS: 3%CPEs: 9EXPL: 1CVE-2005-1308 – SqWebMail 3.x/4.0 - HTTP Response Splitting
https://notcve.org/view.php?id=CVE-2005-1308
15 Apr 2005 — SqWebMail allows remote attackers to inject arbitrary web script or HTML via CRLF sequences in the redirect parameter followed by the desired script or HTML. • https://www.exploit-db.com/exploits/25534 •
CVSS: 6.8EPSS: 12%CPEs: 1EXPL: 2CVE-2004-0591 – SqWebMail 4.0.4.20040524 - Email Header HTML Injection
https://notcve.org/view.php?id=CVE-2004-0591
24 Jun 2004 — Cross-site scripting (XSS) vulnerability in the print_header_uc function for SqWebMail 4.0.4 and earlier, and possibly 3.x, allows remote attackers to inject arbitrary web script or HRML via (1) e-mail headers or (2) a message with a "message/delivery-status" MIME Content-Type. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la función print_header_uc de SqWebMail 4.0.4 y anteriores, y posiblemente 3.x, permite a atacantes remotos inyectar script web arbitrario o HTML mediante (1) cabec... • https://www.exploit-db.com/exploits/24227 •