CVE-2007-2720

CVE-2007-2720 affects Group-Office prior to 2.16-13. The issue is improper validation of user IDs, allowing remote attackers to obtain sensitive information via requests to (1) message.php and (2) messages.php in the modules/email directory. The available documents do not provide a patch or remed...