CVE-2006-2484

Cross-site scripting XSS vulnerability in index.html in IceWarp WebMail 5.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in index.html in IceWarp WebMail 5.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter...

CVE-2006-2484

Cross-site scripting XSS vulnerability in index.html in IceWarp WebMail 5.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter...

CVE-2006-2484

CVE-2006-2484 affects IceWarp WebMail

FreeBSD : horde -- XSS vulnerabilities in MIME viewers (873a6542-5b8d-11da-b96e-000fb586ba73)

Announce of Horde 3.0.7 final : This 3.0.7 is a security release that fixes cross site scripting vulnerabilities in two of Horde's MIME viewers. These holes could for example be exploited by an attacker sending specially crafted emails to Horde's webmail client IMP. The attack could be used to...

RHEL 3 / 4 : squirrelmail (RHSA-2006:0283)

An updated squirrelmail package that fixes three security and many other bug issues is now available. This update contains bug fixes of upstream squirrelmail 1.4.6 with some additional improvements to international language support. This update has been rated as having moderate security impact by...

squirrelmail security update

CentOS Errata and Security Advisory CESA-2006:0283 An updated squirrelmail package that fixes three security and many other bug issues is now available. This update contains bug fixes of upstream squirrelmail 1.4.6 with some additional improvements to international language support. This update h...

Moderate: Red Hat Security Advisory: squirrelmail security update

An updated squirrelmail package that fixes three security and many other bug issues is now available. This update contains bug fixes of upstream squirrelmail 1.4.6 with some additional improvements to international language support. This update has been rated as having moderate security impact by...

security flaw

webmail.php in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary web pages into the right frame via a URL in the rightframe parameter. NOTE: this has been called a cross-site scripting XSS issue, but it is different than what is normally identified as XSS...

Neomail.pl Local Cross Site Scripting

Aria-Security.net Advisory Discovered by: O.u.t.l.a.w www.Aria-security.net Gr33t to: A.u.r.a & R@1D3N & Smok3r ----------------------------------------------------------- Software: Neomail WebMail Link: http://neomail.sourceforge.net/ Attack method: Cross Site Scripting...

Open WebMail <=2.51 XSS vuln.

Open WebMail =2.51 XSS vuln. Vulnerability discovered by : r0t Date: 27 april 2006 vendorlink:http://openwebmail.org/ affected versions:2.51 and prior orginal advisory: http://pridels.blogspot.com/2006/04/open-webmail-251-xss-vuln.html Vuln. Description: Open WebMail contains a flaw that allows a...

Winmail Server Webmail Unspecified Vulnerability

The remote host is running Winmail Server, a commercial mail server for Windows from AMAX Information Technologies. According to its version number, the remote installation of Winmail Server is affected by an unknown issue in its webmail component. It is unclear whether this is the same issue...

VisNetic / Merak Mail Server multiple flaws

The remote webmail server is affected by multiple vulnerabilities which may allow an attacker to execute arbitrary commands on the remote host. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

VisNetic / Merak Mail Server multiple flaws

The remote webmail server is affected by multiple vulnerabilities which may allow an attacker to execute arbitrary commands on the remote host. Description: The remote host is running VisNetic / Merak Mail Server, a multi-featured mail server for Windows. The webmail and webadmin services include...

Code injection

Webmail in MailEnable Professional Edition before 1.73 and Enterprise Edition before 1.21 allows remote attackers to cause a denial of service CPU consumption via unspecified vectors involving "incorrectly encoded quoted-printable emails"...

CVE-2006-1338

Webmail in MailEnable Professional Edition before 1.73 and Enterprise Edition before 1.21 allows remote attackers to cause a denial of service CPU consumption via unspecified vectors involving "incorrectly encoded quoted-printable emails"...

CVE-2006-1338

CVE-2006-1338 affects MailEnable Webmail in Professional Edition before 1.73 and Enterprise Edition before 1.21. The vulnerability allows remote attackers to cause a denial of service through CPU consumption by handling specially crafted quoted-printable emails in the webmail interface (vectors a...

CVE-2006-1338

Webmail in MailEnable Professional Edition before 1.73 and Enterprise Edition before 1.21 allows remote attackers to cause a denial of service CPU consumption via unspecified vectors involving "incorrectly encoded quoted-printable emails"...

MailEnable WebMail Multiple Products Quoted Printable Mail DoS

Binary data 3482.prm...

[SA19288] MailEnable Webmail and Unspecified POP Vulnerabilities

TITLE: MailEnable Webmail and Unspecified POP Vulnerabilities SECUNIA ADVISORY ID: SA19288 VERIFY ADVISORY: http://secunia.com/advisories/19288/ CRITICAL: Moderately critical IMPACT: Unknown, DoS WHERE: From remote SOFTWARE: MailEnable Standard 1.x http://secunia.com/product/3882/ MailEnable...