Login Request a demo
WS
Product
Webmail Server
by Icewarp · last CVE May 5, 2009
3
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 0Medium 0Low 0
Severity
All severities3Critical0High0Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Webmail Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2009-1469
–
5%
May 5
CRLF injection vulnerability in the Forgot Password implementation in server/webmail.php in IceWarp eMail Server and WebMail Server before 9.4.2 makes it easier for remote…
Affected: through 9.3.0; 2.10.105; 2.10.110; 2.10.115; 2.10.140; 2.10.150; +34 more
CVE-2009-1468
–
2%
May 5
Multiple SQL injection vulnerabilities in the search form in server/webmail.php in the Groupware component in IceWarp eMail Server and WebMail Server before 9.4.2 allow remote…
Affected: through 9.3.0; 2.10.105; 2.10.110; 2.10.115; 2.10.140; 2.10.150; +34 more
CVE-2009-1467
–
4%
May 5
Multiple cross-site scripting (XSS) vulnerabilities in IceWarp eMail Server and WebMail Server before 9.4.2 allow remote attackers to inject arbitrary web script or HTML via (1)…
Affected: through 9.3.0; 2.10.105; 2.10.110; 2.10.115; 2.10.140; 2.10.150; +34 more
Showing 3