Login Request a demo
IC
Vendor
Icewarp
13 products with CVEs on record
81
CVEs
0
On KEV
0
New 30D
Products
WM
Web Mail
Icewarp
–
25 CVEs0 on KEV0 new
MS
Mail Server
Icewarp
9.8
19 CVEs0 on KEV0 new
WE
Webclient
Icewarp
7.5
10 CVEs0 on KEV0 new
IC
IceWarp
IceWarp
9.8
9 CVEs0 on KEV0 new
ES
Email Server
Icewarp
–
3 CVEs0 on KEV0 new
IM
Icewarp Mail Server
Icewarp
6.1
3 CVEs0 on KEV0 new
MM
Merak Mail Server
Icewarp
–
3 CVEs0 on KEV0 new
WS
Webmail Server
Icewarp
–
3 CVEs0 on KEV0 new
IS
Icewarp Server
Icewarp
6.1
2 CVEs0 on KEV0 new
DC
Deep Castle G2
Icewarp
6.1
1 CVEs0 on KEV0 new
IC
ICEWARP Client
icewarp
6.1
1 CVEs0 on KEV0 new
SE
Server
Icewarp
6.1
1 CVEs0 on KEV0 new
WD
Webclient Dc2
Icewarp
9.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2018-25269
IC
ICEWARP Client
icewarp
6.1
0%
Apr 22ICEWARP 11.0.0.0 Cross-Site Scripting via Email HTML Injection
CVE-2026-2493
IC
IceWarp
IceWarp
7.5
5%
Mar 13IceWarp collaboration Directory Traversal Information Disclosure Vulnerability
CVE-2025-14500
IC
IceWarp
IceWarp
9.8
2%
Dec 23IceWarp14 X-File-Operation Command Injection Remote Code Execution Vulnerability
CVE-2025-14499
IC
IceWarp
IceWarp
8.8
1%
Dec 23IceWarp gmaps Cross-Site Scripting Authentication Bypass Vulnerability
CVE-2025-40632
IM
Icewarp Mail Server
Icewarp
6.1
0%
May 16Cross-site scripting (XSS) vulnerability in IceWarp Mail Server
CVE-2025-40631
IM
Icewarp Mail Server
Icewarp
6.1
0%
May 16HTTP host header injection vulnerability in IceWarp Mail Server
CVE-2025-40630
IM
Icewarp Mail Server
Icewarp
6.1
0%
May 16Open redirection vulnerability in IceWarp Mail Server
CVE-2024-55218
IC
Icewarp
Icewarp
6.1
1%
Jan 7IceWarp Server 10.2.1 is vulnerable to Cross Site Scripting (XSS) via the meta parameter
CVE-2024-0246
IC
Icewarp
Icewarp
6.1
0%
Jan 5IceWarp Utility Download cross site scripting
CVE-2023-43319
WE
Webclient
Icewarp
6.1
1%
Sep 25Cross Site Scripting (XSS) vulnerability in the Sign-In page of IceWarp WebClient 10.3.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected…
CVE-2023-40779
DC
Deep Castle G2
Icewarp
6.1
1%
Sep 14An issue in IceWarp Mail Server Deep Castle 2 v.13.0.1.2 allows a remote attacker to execute arbitrary code via a crafted request to the URL
CVE-2023-41013
IC
Icewarp
Icewarp
6.1
1%
Sep 12Cross Site Scripting (XSS) in Webmail Calendar in IceWarp 10.3.1 allows remote attackers to inject arbitrary web script or HTML via the "p4" field
CVE-2023-39598
WE
Webclient
Icewarp
6.1
1%
Sep 5Cross Site Scripting vulnerability in IceWarp Corporation WebClient v.10.2.1 allows a remote attacker to execute arbitrary code via a crafted payload to the mid parameter
CVE-2023-39600
IC
Icewarp
Icewarp
6.1
1%
Aug 25IceWarp 11.4.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the color parameter
CVE-2023-39700
MS
Mail Server
Icewarp
6.1
1%
Aug 25IceWarp Mail Server v10.4.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the color parameter
CVE-2023-39699
MS
Mail Server
Icewarp
9.8
1%
Aug 25IceWarp Mail Server v10.4.5 was discovered to contain a local file inclusion (LFI) vulnerability via the component /calendar/minimizer/index.php
CVE-2021-36580
IS
Icewarp Server
Icewarp
6.1
2%
Jul 27Open Redirect vulnerability exists in IceWarp MailServer IceWarp Server Deep Castle 2 Update 1 (13.0.1.2) via the referer parameter
CVE-2023-37728
IC
Icewarp
Icewarp
6.1
1%
Jul 20IceWarp v10.2.1 was discovered to contain cross-site scripting (XSS) vulnerability via the color parameter
CVE-2022-35115
WD
Webclient Dc2
Icewarp
9.8
1%
Aug 23IceWarp WebClient DC2 - Update 2 Build 9 (13.0.2.9) was discovered to contain a SQL injection vulnerability via the search parameter at /webmail/server/webmail.php
CVE-2020-25925
WE
Webclient
Icewarp
6.1
1%
Jul 7Cross Site Scripting (XSS) in Webmail Calender in IceWarp WebClient 10.3.5 allows remote attackers to inject arbitrary web script or HTML via the "p4" field
CVE-2020-27982
MS
Mail Server
Icewarp
6.1
5%
Nov 2IceWarp 11.4.5.0 allows XSS via the language parameter
CVE-2020-14066
MS
Mail Server
Icewarp
8.8
2%
Jul 15IceWarp Email Server 12.3.0.1 allows remote attackers to upload JavaScript files that are dangerous for clients to access
CVE-2020-14065
MS
Mail Server
Icewarp
6.5
1%
Jul 15IceWarp Email Server 12.3.0.1 allows remote attackers to upload files and consume disk space
CVE-2020-14064
MS
Mail Server
Icewarp
6.5
1%
Jul 15IceWarp Email Server 12.3.0.1 has Incorrect Access Control for user accounts
CVE-2020-8512
IS
Icewarp Server
Icewarp
6.1
15%
Feb 1In IceWarp Webmail Server through 11.4.4.1, there is XSS in the /webmail/ color parameter
CVE-2019-19265
MS
Mail Server
Icewarp
6.1
1%
Jan 6IceWarp WebMail Server 12.2.0 and 12.1.x before 12.2.1.1 (and probably earlier versions) allows XSS (issue 1 of 2) in notes for contacts
CVE-2019-19266
MS
Mail Server
Icewarp
5.4
1%
Jan 6IceWarp WebMail Server 12.2.0 and 12.1.x before 12.2.1.1 (and probably earlier versions) allows XSS (issue 2 of 2) in notes for objects
CVE-2010-5340
WE
Webclient
Icewarp
6.1
1%
Oct 11IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/ with the parameter password is non-persistent in 10.2.0
CVE-2010-5339
WE
Webclient
Icewarp
6.1
1%
Oct 11IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter _dlg[captcha][uid] is non-persistent in 10.1.3 and 10.2.0
CVE-2010-5338
WE
Webclient
Icewarp
6.1
1%
Oct 11IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter _dlg[captcha][action] is non-persistent in 10.1.3 and 10.2.0
CVE-2010-5337
WE
Webclient
Icewarp
6.1
1%
Oct 11IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter _dlg[captcha][controller] is non-persistent in 10.1.3 and 10.2.0
CVE-2010-5336
WE
Webclient
Icewarp
6.1
1%
Oct 11IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: admin/login.html with the parameter username is persistent in 10.2.0
CVE-2010-5335
WE
Webclient
Icewarp
7.5
3%
Oct 11IceWarp Webclient before 10.2.1 has a directory traversal vulnerability
CVE-2010-5334
WE
Webclient
Icewarp
7.5
3%
Oct 11IceWarp Webclient before 10.2.1 has a directory traversal vulnerability
CVE-2019-12593
MS
Mail Server
Icewarp
7.5
41%
Jun 3IceWarp Mail Server through 10.4.4 is prone to a local file inclusion vulnerability via webmail/calendar/minimizer/index.php?style=..%5c directory traversal
CVE-2018-16324
MS
Mail Server
Icewarp
6.1
1%
Sep 1In IceWarp Server 12.0.3.1 and before, there is XSS in the /webmail/ username field
CVE-2018-7475
MS
Mail Server
Icewarp
6.1
1%
Jun 30Cross-site scripting (XSS) vulnerability for webdav/ticket/ URIs in IceWarp Mail Server 12.0.3 allows remote attackers to inject arbitrary web script or HTML
CVE-2015-1503
MS
Mail Server
Icewarp
7.5
57%
May 8Multiple directory traversal vulnerabilities in IceWarp Mail Server before 11.2 allow remote attackers to read arbitrary files via a (1)
CVE-2017-7855
SE
Server
Icewarp
6.1
2%
Aug 31In the webmail component in IceWarp Server 11.3.1.5, there was an XSS vulnerability discovered in the "language" parameter
CVE-2017-12844
MS
Mail Server
Icewarp
4.8
1%
Aug 23Cross-site scripting (XSS) vulnerability in the admin panel in IceWarp Mail Server 10.4.4 allows remote authenticated domain administrators to inject arbitrary web script or HTML…
CVE-2011-3580
MS
Mail Server
Icewarp
–
2%
Sep 30IceWarp WebMail in IceWarp Mail Server before 10.3.3 allows remote attackers to obtain configuration information via a direct request to the /server URI, which triggers a call to…
CVE-2011-3579
MS
Mail Server
Icewarp
–
5%
Sep 30server/webmail.php in IceWarp WebMail in IceWarp Mail Server before 10.3.3 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or…
CVE-2009-1469
ES
Email Server
Icewarp
–
5%
May 5CRLF injection vulnerability in the Forgot Password implementation in server/webmail.php in IceWarp eMail Server and WebMail Server before 9.4.2 makes it easier for remote…
CVE-2009-1468
ES
Email Server
Icewarp
–
2%
May 5Multiple SQL injection vulnerabilities in the search form in server/webmail.php in the Groupware component in IceWarp eMail Server and WebMail Server before 9.4.2 allow remote…
CVE-2009-1467
ES
Email Server
Icewarp
–
4%
May 5Multiple cross-site scripting (XSS) vulnerabilities in IceWarp eMail Server and WebMail Server before 9.4.2 allow remote attackers to inject arbitrary web script or HTML via (1)…
CVE-2009-1516
MM
Merak Mail Server
Icewarp
–
3%
May 4Stack-based buffer overflow in the IceWarpServer.APIObject ActiveX control in api.dll in IceWarp Merak Mail Server 9.4.1 might allow context-dependent attackers to execute…
CVE-2008-5734
MM
Merak Mail Server
Icewarp
–
1%
Dec 26Cross-site scripting (XSS) vulnerability in WebMail Pro in IceWarp Software Merak Mail Server 9.3.2 allows remote attackers to inject arbitrary web script or HTML via an IMG…
CVE-2007-5046
MM
Merak Mail Server
Icewarp
–
1%
Sep 24Cross-site scripting (XSS) vulnerability in the Webmail interface for IceWarp Merak Mail Server before 9.0.0 allows remote attackers to inject arbitrary JavaScript via a…
CVE-2006-0817
WM
Web Mail
Icewarp
–
6%
Jul 21Absolute path directory traversal vulnerability in (a) MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.1 and (b) VisNetic MailServer before 8.5.0.5 allows…
CVE-2006-0818
WM
Web Mail
Icewarp
–
2%
Jul 21Absolute path directory traversal vulnerability in (1) MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.1 and (2) VisNetic MailServer before 8.5.0.5 allows…
CVE-2006-2484
WM
Web Mail
Icewarp
–
1%
May 19Cross-site scripting (XSS) vulnerability in index.html in IceWarp WebMail 5.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID…
CVE-2005-4557
WM
Web Mail
Icewarp
–
9%
Dec 28dir/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, allows remote attackers to include arbitrary local…
CVE-2005-4559
WM
Web Mail
Icewarp
–
9%
Dec 28mail/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not properly initialize the default_layout…
CVE-2005-4558
WM
Web Mail
Icewarp
–
8%
Dec 28IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not properly restrict acceptable values for the language parameter…
CVE-2005-4556
WM
Web Mail
Icewarp
–
11%
Dec 28PHP remote file include vulnerability in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, when register_globals is…
CVE-2005-3132
WM
Web Mail
Icewarp
–
1%
Oct 4MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to…
CVE-2005-3133
WM
Web Mail
Icewarp
–
6%
Oct 4Multiple directory traversal vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allows remote attackers to (1) delete…
CVE-2005-3131
WM
Web Mail
Icewarp
–
4%
Oct 4Multiple cross-site scripting (XSS) vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allow remote attackers to inject…
CVE-2005-1489
WM
Web Mail
Icewarp
–
1%
May 11Unknown vulnerability in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allows remote authenticated users to obtain the full path of the server via certain requests to (1)…
CVE-2005-1491
WM
Web Mail
Icewarp
–
1%
May 11Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allows remote authenticated users to (1) move their home directory via viewaction.html or (2) move arbitrary files via the…