Directory traversal

Absolute path directory traversal vulnerability in a MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.1 and b VisNetic MailServer before 8.5.0.5 allows remote attackers to include arbitrary files via a full Windows path and drive letter in the 1 language parameter in...

CVE-2005-4556

A PHP remote file include vulnerability exists in IceWarp Web Mail 5.5.1 , which is integrated into Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1 . When register_globals is enabled, remote attackers can exploit the lang_settings and language parameters in accounts/inc/in...