6643 matches found
CVE-2005-1630
Unknown vulnerability in Attachment Mod before 2.3.13, related to a "serious issue with realnames," has unknown impact and attack vectors...
CVE-2003-1154
MAILsweeper for SMTP 4.3 allows remote attackers to bypass virus protection via a mail message with a malformed zip attachment, as exploited by certain MIMAIL virus variants...
CVE-2004-2005
Buffer overflow in Eudora for Windows 5.2.1, 6.0.3, and 6.1 allows remote attackers to execute arbitrary code via an e-mail with 1 a link to a long URL to the C drive or 2 a long attachment name...
CVE-2004-1936
Affected software : ZoneAlarm Pro 4.5.538.001 and possibly other versions. Vulnerability : remote attackers can bypass email protection by using attachments whose filenames contain certain non‑English characters. The provided documents do not specify the underlying root cause, exact vectors beyon...
CVE-2004-1935
Cross-site scripting XSS vulnerability in SCT Campus Pipeline allows remote attackers to inject arbitrary web script or HTML via onload, onmouseover, and other Javascript events in an e-mail attachment...
CVE-2004-1935
CVE-2004-1935 describes a cross-site scripting (XSS) vulnerability in SCT Campus Pipeline where remote attackers can inject arbitrary web script or HTML via onload, onmouseover, and other Javascript events in an email attachment. The NVD metrics indicate the impact is limited to partial integrity...
osTicket <= 1.2.7 Multiple Vulnerabilities
The version of osTicket installed on the remote host suffers from several vulnerabilities : - A Remote File Include Vulnerability The script 'include/main.php' lets an attacker read arbitrary files on the remote host and possibly even run arbitrary PHP code, subject to the privileges of the web...
CVE-2005-1446
SitePanel 2.6.1 and earlier SitePanel2 allows remote attackers to upload and execute arbitrary files such as PHP scripts via an attachment to a trouble ticket...
CVE-2005-1129
eGroupWare 1.0.6 and earlier, when an e-mail is composed with an attachment but not sent, will send that attachment in the next e-mail, which may cause sensitive information to be sent to the wrong recipient...
CVE-2005-0806
Evolution 2.0.3 allows remote attackers to cause a denial of service application crash or hang via crafted messages, possibly involving charsets in attachment filenames...
CVE-2005-0806
Evolution 2.0.3 allows remote attackers to cause a denial of service application crash or hang via crafted messages, possibly involving charsets in attachment filenames...
CVE-2005-0806
Evolution 2.0.3 allows remote attackers to cause a denial of service application crash or hang via crafted messages, possibly involving charsets in attachment filenames...
eGroupWare_infoleak.txt
MasterMind Security Group, Inc. Security Brief Date: April 7, 2005 Contact: Gerald Quakenbush Severity: Moderate to Serious Product: Confirmed in eGroupWare 1.001 and 1.006 Synopsis ======== The eGroupWare open-source software www.egroupware.org has a flaw that could expose confidential...
IlohaMail read_message.php Attachment Multiple Field XSS
Based on its version number, the installation of IlohaMail on the remote host does not properly sanitize attachment file names, MIME media types, and HTML / text email messages. An attacker can exploit these vulnerabilities by sending a specially crafted message to a user which, when read using a...
eGroupWare Leaks Files
MasterMind Security Group, Inc. Security Brief Date: April 7, 2005 Contact: Gerald Quakenbush geraldq AT mastermindsecuritygroup.com Severity: Moderate to Serious Product: Confirmed in eGroupWare 1.001 and 1.006 Synopsis ======== The eGroupWare open-source software www.egroupware.org has a flaw...
EGroupWare < 1.0.0.007 Attachment Information Disclosure
Binary data 2819.prm...
[SIG^2 G-TEC] SurgeMail Webmail Attachment Upload and XSS Vulnerabilities
SIG^2 Vulnerability Research Advisory SurgeMail Webmail Attachment Upload and XSS Vulnerabilities by Tan Chew Keong Release Date: 23 Mar 2005 ADVISORY URL http://www.security.org.sg/vuln/surgemail22g3.html SUMMARY SurgeMail http://netwinsite.com/surgemail/ is a next generation Mail Server -...
surgemail22g3.txt
SIG^2 Vulnerability Research Advisory SurgeMail Webmail Attachment Upload and XSS Vulnerabilities by Tan Chew Keong Release Date: 23 Mar 2005 ADVISORY URL http://www.security.org.sg/vuln/surgemail22g3.html SUMMARY SurgeMail http://netwinsite.com/surgemail/ is a next generation Mail Server -...