Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

CVE-2009-1467

🗓️ 05 May 2009 20:00:00Reported by mitreType 
cve
 cve🔗 web.nvd.nist.gov👁 80 Views🌐 WEB

CVE-2009-1467 IceWarp eMail Server XSS vulnerabilitie

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
nessus
Tenable Nessus		IceWarp Merak WebMail Server < 9.4.2 Multiple Vulnerabilities
18 Aug 200400:00
–nessus
nessus
Tenable Nessus		IceWarp Merak WebMail Server < 9.4.2 Multiple Vulnerabilities
8 May 200900:00
–nessus
circl
Circl		CVE-2009-1467
5 May 200900:00
–circl
cvelist
Cvelist		CVE-2009-1467
5 May 200920:00
–cvelist
exploitdb
Exploit DB		IceWarp Merak Mail Server 9.4.1 - 'cleanHTML()' Cross-Site Scripting
5 May 200900:00
–exploitdb
exploitdb
Exploit DB		IceWarp Merak Mail Server 9.4.1 - 'item.php' Cross-Site Scripting
5 May 200900:00
–exploitdb
euvd
EUVD		EUVD-2009-1465
7 Oct 202500:30
–euvd
nvd
NVD		CVE-2009-1467
5 May 200920:30
–nvd
openvas
OpenVAS		Ubuntu USN-769-1 (libwmf)
5 Jun 200900:00
–openvas
packetstorm
Packet Storm		IceWarp WebMail Email View XSS
5 May 200900:00
–packetstorm
Rows per page
NVD
Node
OR
icewarpemail_serverRange≤9.3.0
icewarpemail_serverMatch2.10.105
icewarpemail_serverMatch2.10.110
icewarpemail_serverMatch2.10.115
icewarpemail_serverMatch2.10.140
icewarpemail_serverMatch2.10.150
icewarpemail_serverMatch2.10.165
icewarpemail_serverMatch2.10.170
icewarpemail_serverMatch2.10.190
icewarpemail_serverMatch2.10.200
icewarpemail_serverMatch2.10.210
icewarpemail_serverMatch2.10.220
icewarpemail_serverMatch2.10.240
icewarpemail_serverMatch2.10.250
icewarpemail_serverMatch2.10.260
icewarpemail_serverMatch2.10.280
icewarpemail_serverMatch2.10.290
icewarpemail_serverMatch2.10.310
icewarpemail_serverMatch2.10.320
icewarpemail_serverMatch2.10.330
icewarpemail_serverMatch2.10.331
icewarpemail_serverMatch2.10.340
icewarpemail_serverMatch2.10.350
icewarpemail_serverMatch2.10.360
icewarpemail_serverMatch3.00.100
icewarpemail_serverMatch3.00.110
icewarpemail_serverMatch3.00.120
icewarpemail_serverMatch3.00.130
icewarpemail_serverMatch3.00.140
icewarpemail_serverMatch3.10.011
icewarpemail_serverMatch3.10.110
icewarpemail_serverMatch4.00.30
icewarpemail_serverMatch4.2.1
icewarpemail_serverMatch4.2.2
icewarpemail_serverMatch4.2.3
icewarpemail_serverMatch4.4.1
icewarpemail_serverMatch4.4.2
icewarpemail_serverMatch4.10.040
icewarpemail_serverMatch4.10.050
icewarpemail_serverMatch5.1.2
icewarpemail_serverMatch5.1.3
icewarpemail_serverMatch5.1.5
icewarpemail_serverMatch5.3.0
icewarpemail_serverMatch5.3.2
icewarpemail_serverMatch5.4.1
icewarpemail_serverMatch5.4.2
icewarpemail_serverMatch5.4.3
icewarpemail_serverMatch5.4.4
icewarpemail_serverMatch5.5.3
icewarpemail_serverMatch5.5.4
icewarpemail_serverMatch5.5.5
icewarpemail_serverMatch5.5.6
icewarpemail_serverMatch5.5.7
icewarpemail_serverMatch5.7.3
icewarpemail_serverMatch5.8.2
icewarpemail_serverMatch5.8.3
icewarpemail_serverMatch5.8.4
icewarpemail_serverMatch5.8.5
icewarpemail_serverMatch5.8.6
icewarpemail_serverMatch5.9.4
icewarpemail_serverMatch6.0.2
icewarpemail_serverMatch6.0.3
icewarpemail_serverMatch6.0.5
icewarpemail_serverMatch6.0.7
icewarpemail_serverMatch6.1.0
icewarpemail_serverMatch6.2.1
icewarpemail_serverMatch7.0.1
icewarpemail_serverMatch7.1.4
icewarpemail_serverMatch7.1.6
icewarpemail_serverMatch7.2.0
icewarpemail_serverMatch7.4.0
icewarpemail_serverMatch7.4.2
icewarpemail_serverMatch7.4.5
icewarpemail_serverMatch7.5.2
icewarpemail_serverMatch7.6.0
icewarpemail_serverMatch7.6.4
icewarpemail_serverMatch8.0.1
icewarpemail_serverMatch8.0.2
icewarpemail_serverMatch8.0.3
icewarpemail_serverMatch8.2.0
icewarpemail_serverMatch8.2.2
icewarpemail_serverMatch8.3.5
icewarpemail_serverMatch8.3.8
icewarpemail_serverMatch8.5.0
icewarpemail_serverMatch8.9.1
icewarpemail_serverMatch9.0.0
icewarpemail_serverMatch9.1.0
icewarpemail_serverMatch9.2.0
icewarpwebmail_serverRange≤9.3.0
icewarpwebmail_serverMatch2.10.105
icewarpwebmail_serverMatch2.10.110
icewarpwebmail_serverMatch2.10.115
icewarpwebmail_serverMatch2.10.140
icewarpwebmail_serverMatch2.10.150
icewarpwebmail_serverMatch2.10.165
icewarpwebmail_serverMatch2.10.170
icewarpwebmail_serverMatch2.10.190
icewarpwebmail_serverMatch2.10.200
icewarpwebmail_serverMatch2.10.210
icewarpwebmail_serverMatch2.10.220
icewarpwebmail_serverMatch2.10.240
icewarpwebmail_serverMatch2.10.250
icewarpwebmail_serverMatch2.10.260
icewarpwebmail_serverMatch2.10.280
icewarpwebmail_serverMatch2.10.290
icewarpwebmail_serverMatch2.10.310
icewarpwebmail_serverMatch2.10.320
icewarpwebmail_serverMatch2.10.330
icewarpwebmail_serverMatch2.10.331
icewarpwebmail_serverMatch2.10.340
icewarpwebmail_serverMatch2.10.350
icewarpwebmail_serverMatch2.10.360
icewarpwebmail_serverMatch3.00.100
icewarpwebmail_serverMatch3.00.110
icewarpwebmail_serverMatch3.00.120
icewarpwebmail_serverMatch3.00.130
icewarpwebmail_serverMatch3.00.140
icewarpwebmail_serverMatch3.10.011
icewarpwebmail_serverMatch3.10.110
icewarpwebmail_serverMatch4.00.30
icewarpwebmail_serverMatch4.2.1
icewarpwebmail_serverMatch4.2.2
icewarpwebmail_serverMatch4.2.3
icewarpwebmail_serverMatch4.4.1
icewarpwebmail_serverMatch4.4.2
icewarpwebmail_serverMatch4.10.040
icewarpwebmail_serverMatch4.10.050
icewarpwebmail_serverMatch5.1.2
icewarpwebmail_serverMatch5.1.3
icewarpwebmail_serverMatch5.1.5
icewarpwebmail_serverMatch5.3.0
icewarpwebmail_serverMatch5.3.2
icewarpwebmail_serverMatch5.4.1
icewarpwebmail_serverMatch5.4.2
icewarpwebmail_serverMatch5.4.3
icewarpwebmail_serverMatch5.4.4
icewarpwebmail_serverMatch5.5.3
icewarpwebmail_serverMatch5.5.4
icewarpwebmail_serverMatch5.5.5
icewarpwebmail_serverMatch5.5.6
icewarpwebmail_serverMatch5.5.7
icewarpwebmail_serverMatch5.7.3
icewarpwebmail_serverMatch5.8.2
icewarpwebmail_serverMatch5.8.3
icewarpwebmail_serverMatch5.8.4
icewarpwebmail_serverMatch5.8.5
icewarpwebmail_serverMatch5.8.6
icewarpwebmail_serverMatch5.9.4
icewarpwebmail_serverMatch6.0.2
icewarpwebmail_serverMatch6.0.3
icewarpwebmail_serverMatch6.0.5
icewarpwebmail_serverMatch6.0.7
icewarpwebmail_serverMatch6.1.0
icewarpwebmail_serverMatch6.2.1
icewarpwebmail_serverMatch7.0.1
icewarpwebmail_serverMatch7.1.4
icewarpwebmail_serverMatch7.1.6
icewarpwebmail_serverMatch7.2.0
icewarpwebmail_serverMatch7.4.0
icewarpwebmail_serverMatch7.4.2
icewarpwebmail_serverMatch7.4.5
icewarpwebmail_serverMatch7.5.2
icewarpwebmail_serverMatch7.6.0
icewarpwebmail_serverMatch7.6.4
icewarpwebmail_serverMatch8.0.1
icewarpwebmail_serverMatch8.0.2
icewarpwebmail_serverMatch8.0.3
icewarpwebmail_serverMatch8.2.0
icewarpwebmail_serverMatch8.2.2
icewarpwebmail_serverMatch8.3.5
icewarpwebmail_serverMatch8.3.8
icewarpwebmail_serverMatch8.5.0
icewarpwebmail_serverMatch8.9.1
icewarpwebmail_serverMatch9.0.0
icewarpwebmail_serverMatch9.1.0
icewarpwebmail_serverMatch9.2.0
ParameterPositionPathDescriptionCWE
bodynestedhtml/webmail/server/inc/tools.phpXSS in email body via cleanHTML filtering bypass in tools.phpCWE-79
titlenestedhtml/webmail/server/inc/rss/item.phpXSS via title in RSS feed item not sanitizedCWE-79
hrefnestedhtml/webmail/server/inc/rss/item.phpXSS via link (href) in RSS feed item not sanitizedCWE-79
descriptionnestedhtml/webmail/server/inc/rss/item.phpXSS via description in RSS feed item that can bypass sanitizationCWE-79

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
16 Jun 2026 23:07Current
5.6Medium risk
Vulners AI Score5.6
CVSS 24.3
EPSS0.04101
CWE-79
cve-2009-1467icewarpemail serverxssvulnerabilitiesweb scripthtmlremote attackersnvdsecurity
80