CVE-2005-1318

Cross-site scripting XSS vulnerability in Horde Forwards E-Mail Forwarding Manager before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...

CVE-2005-1318

Cross-site scripting XSS vulnerability in Horde Forwards E-Mail Forwarding Manager before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...

CVE-2005-1129

eGroupWare 1.0.6 and earlier, when an e-mail is composed with an attachment but not sent, will send that attachment in the next e-mail, which may cause sensitive information to be sent to the wrong recipient...

CVE-2005-1318

Cross-site scripting XSS vulnerability in Horde Forwards E-Mail Forwarding Manager before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...

CVE-2005-1318

The CVE-2005-1318 entry concerns Horde Forwards E-Mail Forwarding Manager prior to 2.2.2, which is vulnerable to cross-site scripting (XSS) via the parent frame page title. The affected component is the Forwarding Manager’s web interface; the root cause is improper handling of the frame title lea...

CVE-2005-1318: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Horde Forwards E-Mail Forwarding Manager before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...

CVE-2001-1445

The CVE-2001-1445 entry relates to Lotus Domino's SMTP server versions 5.0–5.7, where remote attackers could bypass mail relaying restrictions by crafting RCPT TO commands. The available sources describe the vulnerability as an unknown issue with relaying control, without detailing the root cause...

CVE-2005-1138

Unknown vulnerability in WebMail in Kerio MailServer before 6.0.9 allows remote attackers to cause a denial of service CPU consumption via certain e-mail messages...

CVE-2005-1138

Unknown vulnerability in WebMail in Kerio MailServer before 6.0.9 allows remote attackers to cause a denial of service CPU consumption via certain e-mail messages...

CVE-2005-1052

Microsoft Outlook 2003 and Outlook Web Access OWA 2003 do not properly display comma separated addresses in the From field in an e-mail message, which could allow remote attackers to spoof e-mail addresses...

iDEFENSE Security Advisory 04.08.05: Microsoft Multiple E-Mail Client Address Spoofing Vulnerability

Microsoft Multiple E-Mail Client Address Spoofing Vulnerability iDEFENSE Security Advisory 04.08.05 http://www.idefense.com/application/poi/display?type=vulnerabilities April 8, 2005 I. BACKGROUND Microsoft Outlook provides an integrated solution for managing and organizing e-mail messages,...

CVE-2002-1601

The Connectables feature in Adobe PhotoDeluxe 3.1 prepends the Adobe directory to the CLASSPATH environment variable, which allows applets to run with higher privileges and remote attackers to gain privileges via an HTML e-mail message or a web page...

CVE-2005-0667: Undefined Security Weakness

Buffer overflow in Sylpheed before 1.0.3 and other versions before 1.9.5 allows remote attackers to execute arbitrary code via an e-mail message with certain headers containing non-ASCII characters that are not properly handled when the user replies to the message...

CVE-2004-1731

signuppage.php in Mantis bugtracker allows remote attackers to send e-mail bombs by creating multiple users and providing the same e-mail address...

CVE-2004-1731

CVE-2004-1731 affects the Mantis bugtracker, specifically signup_page.php, where remote attackers could create multiple users and provide the same e-mail address to trigger mass e-mail behavior. The vulnerability enables sending e-mail bombs; exploitation details (methods, likelihood, and in-the-...

CVE-2005-0493

CRLF injection vulnerability in bizmail.cgi in Biz Mail Form before 2.2 allows remote attackers to bypass the email check and send spam e-mail via CRLF sequences and forged mail headers in the email parameter...

CVE-2005-0493

The CVE-2005-0493 issue affects Biz Mail Form’s BizMail CGI (bizmail.cgi) prior to version 2.2. A CRLF injection in the email parameter lets remote, unauthenticated attackers bypass the email check and relay spam by crafting email headers via CRLF sequences. The impact is remote abuse of the mail...

HP-UX PHSS_14592 : s700_800 11.00 Predictive C.11.0[0,a-e] cumulative patch

s700800 11.00 Predictive C.11.00,a-e cumulative patch : Fixes a problem with the e-mail or modem traffic to and from on-site customer machines and Response Center Predictive machines. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were...

CVE-2004-1468

CVE-2004-1468 affects Webmin 1.x and Usermin 1.x. The webmail feature contains an input validation bug that allows a remote attacker to execute arbitrary commands by sending specially crafted e-mails with shell metacharacters, leading to remote code execution with the privileges of the Webmin/Use...

CVE-2004-1468: Undefined Security Weakness

The web mail functionality in Usermin 1.x and Webmin 1.x allows remote attackers to execute arbitrary commands via shell metacharacters in an e-mail message...