XSS vulnerability in Sqwebmail 4.0.4

Hello Bugtraq, Sqwebmail http://www.inter7.com/sqwebmail/ is a web cgi client for sending and receiving email using Maildir mailboxes. During a web application security evaluation on Sqwebmail 4.0.4.20040524 we have found a XSS Cross Site Scripting vulnerability inside the printheaderuc function...

CVE-2001-1385

The CVE-2001-1385 issue concerns the Apache module for PHP 4.0.0–4.0.4. When a virtual host is configured with engine = off, PHP can be disabled for other virtual hosts, causing Apache to serve PHP source code instead of executing it. This is a disclosure vulnerability affecting PHP/Apache deploy...

Qpopper 4.0.x - Remote Memory Corruption

Qpopper 4.0.x - Remote Memory Corruption // source: https://www.securityfocus.com/bid/7058/info A memory corruption vulnerability has been discovered in Qpopper version 4.0.4 and earlier. The vulnerability occurs when calling the 'mdef' command and a malicious macro name is supplied. By filling a...

security flaw

The default servlet org.apache.catalina.servlets.DefaultServlet in Tomcat 4.0.4 and 4.1.10 and earlier allows remote attackers to read source code for server files via a direct request to the servlet...

QPopper 4.0.4 buffer overflow

Affected versions 4.0.3 and 4.0.4. default install. Servers, not processing users configuration file /.qpopper-options are insensible to this bug. popbull.c ----------- int CopyOneBull POP p, long bnum, char name FILE bull; char buffer MAXMSGLINELEN ; BOOL inheader = TRUE; BOOL firstline = TRUE;...