WM
Product
Web Mail
25
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Web Mail to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2006-0817 | – | Jul 21 | Absolute path directory traversal vulnerability in (a) MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.1 and (b) VisNetic MailServer before 8.5.0.5 allows… Affected: 5.6.0 |
| CVE-2006-0818 | – | Jul 21 | Absolute path directory traversal vulnerability in (1) MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.1 and (2) VisNetic MailServer before 8.5.0.5 allows… Affected: 5.6.0 |
| CVE-2006-2484 | – | May 19 | Cross-site scripting (XSS) vulnerability in index.html in IceWarp WebMail 5.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID… Affected: 1.40.00; 1.40.10; 3.1.4; 3.3.1; 3.3.2; 3.4.1; +12 more |
| CVE-2005-4556 | – | Dec 28 | PHP remote file include vulnerability in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, when register_globals is… Affected: 5.5.1 |
| CVE-2005-4559 | – | Dec 28 | mail/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not properly initialize the default_layout… Affected: 5.5.1 |
| CVE-2005-4558 | – | Dec 28 | IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not properly restrict acceptable values for the language parameter… Affected: 5.5.1 |
| CVE-2005-4557 | – | Dec 28 | dir/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, allows remote attackers to include arbitrary local… Affected: 5.5.1 |
| CVE-2005-3132 | – | Oct 4 | MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to… Affected: 5.5.1 |
| CVE-2005-3133 | – | Oct 4 | Multiple directory traversal vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allows remote attackers to (1) delete… Affected: 5.5.1 |
| CVE-2005-3131 | – | Oct 4 | Multiple cross-site scripting (XSS) vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allow remote attackers to inject… Affected: 5.5.1 |
| CVE-2005-1489 | – | May 11 | Unknown vulnerability in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allows remote authenticated users to obtain the full path of the server via certain requests to (1)… Affected: 5.4.2 |
| CVE-2005-1488 | – | May 11 | Multiple cross-site scripting (XSS) vulnerabilities in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allow remote authenticated users to inject arbitrary web script or HTML… Affected: 5.4.2 |
| CVE-2005-1490 | – | May 11 | Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2, when the mailbox.dat file does not exist, allows remote authenticated users to determine if a file exists via the folder… Affected: 5.4.2 |
| CVE-2005-1491 | – | May 11 | Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allows remote authenticated users to (1) move their home directory via viewaction.html or (2) move arbitrary files via the… Affected: 5.4.2 |
| CVE-2005-0321 | – | May 2 | MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allows remote authenticated users to gain sensitive information via an HTTP request to (1) calendar_d.html, (2)… Affected: 5.3.0 |
| CVE-2005-0322 | – | May 2 | MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 and Mail Server 7.6.4r with Icewarp Mail Server 5.3.2 uses weak encryption in the (1) users.cfg, (2) settings.cfg, (3)… Affected: 5.3.0; 5.3.2 |
| CVE-2005-0320 | – | Jan 28 | Multiple cross-site scripting vulnerabilities in MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allow remote attackers to inject arbitrary web script or HTML via the (1)… Affected: 5.3 |
| CVE-2004-1671 | – | Oct 12 | Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to gain sensitive information via a direct request to (1)… Affected: 3.3.2; 5.2.7; 5.2.8 |
| CVE-2004-1674 | – | Oct 12 | viewaction.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to (1) delete arbitrary files via the originalfolder… Affected: 3.3.2; 5.2.7; 5.2.8 |
| CVE-2004-1673 | – | Oct 12 | accountsettings_add.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allow remote attackers to create text files with arbitrary content via… Affected: 3.3.2; 5.2.7; 5.2.8 |
| CVE-2004-1672 | – | Oct 12 | attachment.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to view other users' attachments by specifying the… Affected: 3.3.2; 5.2.7; 5.2.8 |
| CVE-2004-1669 | – | Sep 10 | Cross-site scripting (XSS) vulnerability in MERAK Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to execute arbitrary web script… Affected: 3.3.2; 5.2.7; 5.2.8 |
| CVE-2004-1670 | – | Sep 10 | Multiple directory traversal vulnerabilities Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7, and possibly other versions, allow remote attackers to (1) create arbitrary… Affected: 3.3.2; 5.2.7; 5.2.8 |
| CVE-2002-1899 | – | Dec 31 | Cross-site scripting (XSS) vulnerability in IceWarp Web Mail 3.3.3 and 3.4.5 allows remote attackers to inject arbitrary web script or HTML via the "Full Name" (addressname)… Affected: 3.3.3; 3.3.5 |
| CVE-2002-0258 | – | May 29 | Merak Mail IceWarp Web Mail uses a static identifier as a user session ID that does not change across sessions, which could allow remote attackers with access to the ID to gain… Affected: All versions, or not specified |
Showing 25