Directory traversal

Absolute path directory traversal vulnerability in 1 MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.1 and 2 VisNetic MailServer before 8.5.0.5 allows remote authenticated users to include arbitrary files via a modified language parameter and a full Windows or UNC pathname i...

CVE-2005-4558

IceWarp Web Mail 5.5.1 , integrated into Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1 , is vulnerable to an input validation flaw. The software fails to restrict acceptable values for the language parameter in mail/settings.html before storage in a database. This allows...