5045 matches found
CVE-2007-2718
CVE-2007-2718 describes a cross-site scripting (XSS) vulnerability in the WebMail component of Stalker CommuniGate Pro 5.1.8 and earlier when accessed via Microsoft Internet Explorer . The issue allows a remote attacker to inject arbitrary web script or HTML through crafted STYLE tags . The vulne...
CVE-2007-2718
Cross-site scripting XSS vulnerability in the WebMail system in Stalker CommuniGate Pro 5.1.8 and earlier, when using Microsoft Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via crafted STYLE tags...
CVE-2007-2718: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the WebMail system in Stalker CommuniGate Pro 5.1.8 and earlier, when using Microsoft Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via crafted STYLE tags...
CVE-2007-2655
Unspecified vulnerability in NetWin Webmail 3.1s-1 in SurgeMail before 3.8i2 has unknown impact and remote attack vectors, possibly a format string vulnerability that allows remote code execution...
Format string
Unspecified vulnerability in NetWin Webmail 3.1s-1 in SurgeMail before 3.8i2 has unknown impact and remote attack vectors, possibly a format string vulnerability that allows remote code execution...
CVE-2007-2655
CVE-2007-2655 affects NetWin Webmail 3.1s-1 used in SurgeMail prior to version 3.8i2. The vulnerability is described as a potential format string issue that could enable remote code execution. Details are limited in the provided sources; no concrete exploit method, affected module/file, or patch/...
CVE-2007-2655
Unspecified vulnerability in NetWin Webmail 3.1s-1 in SurgeMail before 3.8i2 has unknown impact and remote attack vectors, possibly a format string vulnerability that allows remote code execution...
[SECURITY] Fedora Core 6 Update: squirrelmail-1.4.10a-1.fc6
SquirrelMail is a basic webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render in pure HTML 4.0 with no Javascript for maximum compatibility across browsers. It has very few requirements and is very easy to configure and instal...
CommuniGate Pro WebMail w/ MSIE STYLE Tag XSS
According to its banner, the version of CommuniGate Pro running on the remote host fails to completely sanitize email messages, when using Internet Explorer IE. A remote attacker may be able to leverage this issue to inject arbitrary HTML and script code into a user's browser to be evaluated with...
CVE-2007-2655: Use of Externally-Controlled Format String
Unspecified vulnerability in NetWin Webmail 3.1s-1 in SurgeMail before 3.8i2 has unknown impact and remote attack vectors, possibly a format string vulnerability that allows remote code execution...
DSA-1290-1 squirrelmail
Bulletin has no description...
Cross site scripting
Cross-site scripting XSS vulnerability in checklogin.asp in AfterLogic MailBee WebMail Pro 3.4 allows remote attackers to inject arbitrary web script or HTML via the username parameter...
CVE-2007-2061
Cross-site scripting XSS vulnerability in checklogin.asp in AfterLogic MailBee WebMail Pro 3.4 allows remote attackers to inject arbitrary web script or HTML via the username parameter...
CVE-2007-2061
The CVE-2007-2061 entry documents a Cross-site scripting (XSS) vulnerability in AfterLogic MailBee WebMail Pro 3.4, exploitable via the username parameter in check_login.asp. The affected component is a webmail login page; the underlying issue is reflected XSS allowing a remote attacker to inject...
CVE-2007-2061: Undefined Security Weakness
Cross-site scripting XSS vulnerability in checklogin.asp in AfterLogic MailBee WebMail Pro 3.4 allows remote attackers to inject arbitrary web script or HTML via the username parameter...
[MajorSecurity Advisory #44]MailBee WebMail Pro - Cross Site Scripting Issue
MajorSecurity Advisory 44MailBee WebMail Pro - Cross Site Scripting Issue Details ======= Product: MailBee WebMail Pro 3.4 Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.afterlogic.com Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: Davi...
MailBee WebMail Pro 3.4 - Check_login.asp Cross-Site Scripting
MailBee WebMail Pro 3.4 - Checklogin.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/23481/info MailBee WebMail Pro is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to...
MailBee WebMail Pro 3.4 - 'Check_login.asp' Cross-Site Scripting
source: https://www.securityfocus.com/bid/23481/info MailBee WebMail Pro is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...
CVE-2007-1991
Cross-site scripting XSS vulnerability in mail/signup.asp in CmailServer WebMail 5.4.3, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the Comment parameter, a different vector than CVE-2007-1927...
Cross site scripting
Cross-site scripting XSS vulnerability in mail/signup.asp in CmailServer WebMail 5.4.3, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the Comment parameter, a different vector than CVE-2007-1927...