CVE-2007-3058

Multiple PHP remote file inclusion vulnerabilities in Madirish Webmail 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALSbasedir parameter to 1 calendar.php, 2 compose.php, and 3 index.php, different vectors than CVE-2007-2826. NOTE: the provenance of this informati...