CVE-2011-5065

Cross-site scripting XSS vulnerability in IBM WebSphere Application Server WAS 6.1 before 6.1.0.41 allows remote attackers to inject arbitrary web script or HTML via vectors related to web messaging...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM WebSphere Application Server WAS 6.1 before 6.1.0.41 allows remote attackers to inject arbitrary web script or HTML via vectors related to web messaging...

CVE-2011-5065

Cross-site scripting XSS vulnerability in IBM WebSphere Application Server WAS 6.1 before 6.1.0.41 allows remote attackers to inject arbitrary web script or HTML via vectors related to web messaging...

CVE-2011-5065: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM WebSphere Application Server WAS 6.1 before 6.1.0.41 allows remote attackers to inject arbitrary web script or HTML via vectors related to web messaging...

CVE-2004-2422

Multiple features in Ipswitch IMail Server before 8.13 allow remote attackers to cause a denial of service crash via 1 a long sender field to the Queue Manager or 2 a long To field to the Web Messaging component...

CVE-2004-2422: Undefined Security Weakness

Multiple features in Ipswitch IMail Server before 8.13 allow remote attackers to cause a denial of service crash via 1 a long sender field to the Queue Manager or 2 a long To field to the Web Messaging component...

CVE-2004-2401: Undefined Security Weakness

Stack-based buffer overflow in Ipswitch IMail Express Web Messaging before 8.05 might allow remote attackers to execute arbitrary code via an HTML message with long "tag text."...

CVE-2002-1076

CVE-2002-1076 describes a buffer overflow in the Web Messaging daemon of Ipswitch IMail prior to 7.12. An attacker could trigger the overflow by sending a specially crafted long HTTP GET request for HTTP/1.0, enabling remote code execution. The affected component is the Web Messaging daemon insid...

CVE-2002-1076: Undefined Security Weakness

Buffer overflow in the Web Messaging daemon for Ipswitch IMail before 7.12 allows remote attackers to execute arbitrary code via a long HTTP GET request for HTTP/1.0...

CVE-2002-1076

Buffer overflow in the Web Messaging daemon for Ipswitch IMail before 7.12 allows remote attackers to execute arbitrary code via a long HTTP GET request for HTTP/1.0...

IPSwitch IMail 6.x7.07.1 - Web Messaging GET Buffer Overflow

IPSwitch IMail 6.x7.07.1 - Web Messaging GET Buffer Overflow // source: https://www.securityfocus.com/bid/5323/info IMail is a commercial email server software package distributed and maintained by Ipswitch, Incorporated. IMail is available for Microsoft Operating Systems. The web messaging serve...

IPSwitch IMail 6.x/7.0/7.1 - Web Messaging GET Buffer Overflow

// source: https://www.securityfocus.com/bid/5323/info IMail is a commercial email server software package distributed and maintained by Ipswitch, Incorporated. IMail is available for Microsoft Operating Systems. The web messaging server is vulnerable to a buffer overflow. When the server receive...

CVE-2001-1281

Web Messaging Server for Ipswitch IMail 7.04 and earlier is affected. The vulnerability allows remote authenticated users to change information for other users by modifying the olduser parameter in the Change User Information web form. Documented impact is information integrity on user data; expl...

CVE-2001-1281: Undefined Security Weakness

Web Messaging Server for Ipswitch IMail 7.04 and earlier allows remote authenticated users to change information for other users by modifying the olduser parameter in the "Change User Information" web form...

CVE-2001-1281

Web Messaging Server for Ipswitch IMail 7.04 and earlier allows remote authenticated users to change information for other users by modifying the olduser parameter in the "Change User Information" web form...

Vulnerabilities in Ipswitch IMail Server 7.04

Hi all, There are a couple of vulnerabilities in Ipswitch IMail Server 7.04. In the POP3 Server If you enter a valid username the reply is: +OK welcome On the other hand, if you enter a username that doesn't exist on the server the reply is: +OK send your password This gives you a way to probe fo...