OW
Vendor
Open Webmail
13
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2007-4172 | OW Open Webmail Open Webmail | – | Aug 7 | Multiple cross-site scripting (XSS) vulnerabilities in Open Webmail (OWM) 2.52 20060831 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1)… |
| CVE-2006-3233 | OW Open Webmail Open Webmail | – | Jun 27 | Cross-site scripting (XSS) vulnerability in openwebmail-read.pl in Open WebMail (OWM) 2.52, and other versions released before 06/18/2006, allows remote attackers to inject… |
| CVE-2006-3229 | OW Open Webmail Open Webmail | – | Jun 27 | Cross-site scripting (XSS) vulnerability in Open WebMail (OWM) 2.52, and other versions released before 05/12/2006, allows remote attackers to inject arbitrary web script or HTML… |
| CVE-2006-2190 | OW Open Webmail Open Webmail | – | May 4 | Cross-site scripting (XSS) vulnerability in ow-shared.pl in OpenWebMail (OWM) 2.51 and earlier allows remote attackers to inject arbitrary web script or HTML via the sessionid… |
| CVE-2005-2863 | OW Open Webmail Open Webmail | – | Sep 8 | Cross-site scripting (XSS) vulnerability in openwebmail-main.pl in OpenWebMail 2.41 allows remote attackers to inject arbitrary web script or HTML via the sessionid parameter |
| CVE-2005-1435 | OW Open Webmail Open Webmail | – | May 3 | Open WebMail (OWM) before 2.51 20050430 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a filename |
| CVE-2005-0445 | OW Open Webmail Open Webmail | – | May 2 | Cross-site scripting (XSS) vulnerability in Open WebMail 2.x allows remote attackers to inject arbitrary HTML or web script via the domain name parameter (logindomain) in the… |
| CVE-2004-2458 | OW Open Webmail Open Webmail | – | Dec 31 | Open WebMail 2.30 and earlier, when use_syshomedir is disabled or create_syshomedir is enabled, creates new directories before authenticating, which allows remote attackers to… |
| CVE-2004-2284 | OW Open Webmail Open Webmail | – | Dec 31 | The read_list_from_file function in vacation.pl for OpenWebmail before 2.32 20040629 allows remote attackers to execute arbitrary commands via shell metacharacters in a filename… |
| CVE-2004-0520 | OW Open Webmail Open Webmail | – | Aug 18 | Cross-site scripting (XSS) vulnerability in mime.php for SquirrelMail before 1.4.3 allows remote attackers to insert arbitrary HTML and script via the content-type mail header, as… |
| CVE-2004-0639 | OW Open Webmail Open Webmail | – | Aug 6 | Multiple cross-site scripting (XSS) vulnerabilities in Squirrelmail 1.2.10 and earlier allow remote attackers to inject arbitrary HTML or script via (1) the $mailer variable in… |
| CVE-2002-2410 | OW Open Webmail Open Webmail | – | Dec 31 | openwebmail.pl in Open WebMail 1.7 and 1.71 reveals sensitive information in error messages and generates different responses whether a user exists or not, which allows remote… |
| CVE-2002-1385 | OW Open Webmail Open Webmail | – | Dec 26 | openwebmail_init in Open WebMail 1.81 and earlier allows local users to execute arbitrary code via |