CVE-2006-1338

Webmail in MailEnable Professional Edition before 1.73 and Enterprise Edition before 1.21 allows remote attackers to cause a denial of service CPU consumption via unspecified vectors involving "incorrectly encoded quoted-printable emails"...

CVE-2006-1338

CVE-2006-1338 affects MailEnable Webmail in Professional Edition before 1.73 and Enterprise Edition before 1.21. The vulnerability allows remote attackers to cause a denial of service through CPU consumption by handling specially crafted quoted-printable emails in the webmail interface (vectors a...

MailEnable WebMail Multiple Products Quoted Printable Mail DoS

Binary data 3482.prm...

[SA19288] MailEnable Webmail and Unspecified POP Vulnerabilities

TITLE: MailEnable Webmail and Unspecified POP Vulnerabilities SECUNIA ADVISORY ID: SA19288 VERIFY ADVISORY: http://secunia.com/advisories/19288/ CRITICAL: Moderately critical IMPACT: Unknown, DoS WHERE: From remote SOFTWARE: MailEnable Standard 1.x http://secunia.com/product/3882/ MailEnable...

Design/Logic Flaw

Unspecified vulnerability in the Webmail module in Winmail before 4.3 has unknown impact and unknown remote attack vectors...

CVE-2006-1250

Unspecified vulnerability in the Webmail module in Winmail before 4.3 has unknown impact and unknown remote attack vectors...

CVE-2006-1250

Unspecified vulnerability in the Webmail module in Winmail before 4.3 has unknown impact and unknown remote attack vectors...

CVE-2006-1250

Technical details for CVE-2006-1250 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.

GLSA-200603-09 : SquirrelMail: XSS and IMAP command injection

The remote host is affected by the vulnerability described in GLSA-200603-09 SquirrelMail: XSS and IMAP command injection SquirrelMail does not validate the rightframe parameter in webmail.php, possibly allowing frame replacement or cross-site scripting CVE-2006-0188. Martijn Brinkers and Scott...

SquirrelMail: Cross-site scripting and IMAP command injection

Background SquirrelMail is a webmail package written in PHP. It supports IMAP and SMTP protocols. Description SquirrelMail does not validate the rightframe parameter in webmail.php, possibly allowing frame replacement or cross-site scripting CVE-2006-0188. Martijn Brinkers and Scott Hughes...

[SECURITY] [DSA 988-1] New squirrelmail packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 988-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 8th, 2006 http://www.debian.org/security/faq -...

DSA-988-1 squirrelmail - several

Bulletin has no description...

Code injection

config/configinc.php in iGENUS Webmail 2.02 and earlier allows remote attackers to include arbitrary local files via the SGHOME parameter...

CVE-2006-1031

config/configinc.php in iGENUS Webmail 2.02 and earlier allows remote attackers to include arbitrary local files via the SGHOME parameter...

CVE-2006-1031

config/configinc.php in iGENUS Webmail 2.02 and earlier allows remote attackers to include arbitrary local files via the SGHOME parameter...

CVE-2006-1031

CVE-2006-1031 affects iGENUS Webmail 2.02 and earlier. The vulnerability allows a remote attacker to include arbitrary local files via the SG_HOME parameter in config/config_inc.php. This can impact confidentiality, integrity, and availability (partial). The NVD entry lists a base CVSS v2 score o...

CVE-2006-0930

Directory traversal vulnerability in Webmail in ArGoSoft Mail Server Pro 1.8 allows remote authenticated users to read arbitrary files via a .. dot dot in the UIDL parameter...

CVE-2006-0930

Directory traversal vulnerability in Webmail in ArGoSoft Mail Server Pro 1.8 allows remote authenticated users to read arbitrary files via a .. dot dot in the UIDL parameter...

[ MDKSA-2006:049 ] - Updated squirrelmail packages fix vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:049 http://www.mandriva.com/security/ Package : squirrelmail Date : February 27, 2006 Affected: Corporate 3.0 Problem Description: Webmail.php in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject...

[SA19036] iGENUS Webmail File Inclusion Vulnerability

TITLE: iGENUS Webmail File Inclusion Vulnerability SECUNIA ADVISORY ID: SA19036 VERIFY ADVISORY: http://secunia.com/advisories/19036/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: iGENUS Webmail 2.x http://secunia.com/product/8368/ DESCRIPTIO...