1936 matches found
CVE-2005-0320
Multiple cross-site scripting vulnerabilities in MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 username parameter to login.html, 2 accountid parameter to accountsettingsadd.html, or the 3 note, 4 title, and 5 location...
CVE-2005-0321
MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allows remote authenticated users to gain sensitive information via an HTTP request to 1 calendard.html, 2 calendarm.html, 3 calendarw.html, or 4 calendary.html, which reveal the installation path...
CVE-2005-0321
CVE-2005-0321 affects MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0. An authenticated remote user can cause information disclosure by requesting one of four calendar pages (calendar_d.html, calendar_m.html, calendar_w.html, calendar_y.html), which reveals the installation path. The issue is...
ArGoSoft Mail Server < 1.8.7.4 HTML Injection
Binary data 2606.prm...
ArGoSoft Mail Server Multiple Traversals
The remote host is running the ArGoSoft WebMail interface. There are multiple flaws in this interface that may allow an authenticated attacker to read arbitrary files on the remote server and create / delete arbitrary directories on the affected host. %NASLMINLEVEL 70300 C Tenable Network Securit...
CVE-2005-0367
Multiple directory traversal vulnerabilities in ArGoSoft Mail Server 1.8.7.3 allow remote authenticated users to read, delete, or upload arbitrary files via a .. dot dot in 1 the filename of an e-mail attachment, 2 the msgatt.rec file, 3 and the /msg, /delete, /folderadd, and /folderdelete...
Postfix mail server IPv6 configuration unauthorized mail relaying
In specific configurations, for example if ran in chroot environment on IPv6 network, message relaying is not limited allowing relay to be used for SPAM sending...
DeskNow Mail and Collaboration Server Directory Traversal
WebMail interface directory traversal...
[SIG^2 G-TEC] DeskNow Mail and Collaboration Server Directory Traversal Vulnerabilities
SIG^2 Vulnerability Research Advisory DeskNow Mail and Collaboration Server Directory Traversal Vulnerabilities by Tan Chew Keong Release Date: 02 Feb 2005 ADVISORY URL http://www.security.org.sg/vuln/desknow2512.html SUMMARY DeskNow Mail and Collaboration Server...
UW IMAP: CRAM-MD5 authentication bypass
Background UW IMAP is the University of Washington IMAP toolkit which includes POP3 and IMAP daemons. Description A logic bug in the code handling CRAM-MD5 authentication incorrectly specifies the condition for successful authentication. Impact An attacker could exploit this vulnerability to...
SmarterTools SmarterMail Attachment Upload XSS
There are flaws in the remote SmarterMail, a web mail interface. This version of SmarterMail is affected by a cross-site scripting issue. An attacker, exploiting this flaw, would be able to steal user credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include 'compat.inc' ;...
Multiple vulnerabilities in Icewarp Web Mail 5.3.0: New holes
ShineShadow Security Report 26012005-03 TITLE: Multiple vulnerabilities in Icewarp Web Mail 5.3.0 : New holes. BACKGROUND Merak Mail Server, with the revolutionary Merak Mail Server GroupWare Server, cutting-edge Merak Mail Server Instant Antispam and much more, is the fastest, most stable, secur...
HexView Security Advisory 2601-20-05.03
ShineShadow Security Report 26012005-03 TITLE: Multiple vulnerabilities in Icewarp Web Mail 5.3.0 : New holes. BACKGROUND Merak Mail Server, with the revolutionary Merak Mail Server GroupWare Server, cutting-edge Merak Mail Server Instant Antispam and much more, is the fastest, most stable, secur...
CVE-2005-0320
Multiple cross-site scripting vulnerabilities in MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 username parameter to login.html, 2 accountid parameter to accountsettingsadd.html, or the 3 note, 4 title, and 5 location...
DEBIAN-CVE-2004-1013
The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as 1 "bodyp", 2 "binaryp", or 3 "binaryp" that cause an index increment error that leads to an out-of-bounds memory corruption...
CVE-2004-2446
Directory traversal vulnerability in 1st Class Mail Server 4.01 allows remote attackers to read arbitrary files via a ".." dot dot sequences in unknown vectors...
CVE-2004-2447
Cross-site scripting XSS vulnerability in 1st Class Mail Server 4.01 allows remote attackers to inject arbitrary web script or HTML via the Mailbox parameter to 1 viewmail.tagz, 2 the index script under /user/, 3 members.tagz, 4 general.tagz, 5 advanced.tagz, or 6 list.tagz...
CVE-2004-2494
Cross-site scripting XSS vulnerability in error in Ability Mail Server 1.18 allows remote attackers to inject arbitrary web script or HTML via the erromsg parameter...