Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

icewarp mail server 9.4.1 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2011-3579
server/webmail.php in IceWarp WebMail in IceWarp Mail Server prior to 10.3.3 allows remote malicious users to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaratio...
Icewarp Mail Server 10.0.3Icewarp Mail Server 10.0.4Icewarp Mail Server 10.2.1Icewarp Mail Server 10.2.2Icewarp Mail Server 9.4.2Icewarp Mail ServerIcewarp Mail Server 10.3.1Icewarp Mail Server 10.1.4Icewarp Mail Server 10.2.0Icewarp Mail Server 9.4.0Icewarp Mail Server 9.4.1Icewarp Mail Server 10.0.7Icewarp Mail Server 10.0.8Icewarp Mail Server 10.1.1Icewarp Mail Server 10.3.0Icewarp Mail Server 9.3.0Icewarp Mail Server 10.1.2Icewarp Mail Server 10.1.3Icewarp Mail Server 9.3.1Icewarp Mail Server 9.3.2
NA
CVE-2011-3580
IceWarp WebMail in IceWarp Mail Server prior to 10.3.3 allows remote malicious users to obtain configuration information via a direct request to the /server URI, which triggers a call to the phpinfo function.
Icewarp Mail Server 10.0.7Icewarp Mail Server 10.0.8Icewarp Mail Server 10.0.3Icewarp Mail Server 10.0.4Icewarp Mail Server 10.2.1Icewarp Mail Server 10.2.2Icewarp Mail Server 9.4.1Icewarp Mail Server 9.4.0Icewarp Mail Server 10.1.2Icewarp Mail Server 10.1.3Icewarp Mail Server 9.3.1Icewarp Mail Server 9.3.2Icewarp Mail Server 10.1.1Icewarp Mail Server 10.3.0Icewarp Mail Server 9.3.0Icewarp Mail Server 9.4.2Icewarp Mail Server 10.3.1Icewarp Mail Server 10.1.4Icewarp Mail Server 10.2.0Icewarp Mail Server
NA
CVE-2009-1516
Stack-based buffer overflow in the IceWarpServer.APIObject ActiveX control in api.dll in IceWarp Merak Mail Server 9.4.1 might allow context-dependent malicious users to execute arbitrary code via a large value in the second argument to the Base64FileEncode method, as possibly de...
Icewarp Merak Mail Server 9.4.1
NA
CVE-2009-1469
CRLF injection vulnerability in the Forgot Password implementation in server/webmail.php in IceWarp eMail Server and WebMail Server prior to 9.4.2 makes it easier for remote malicious users to trick a user into disclosing credentials via CRLF sequences preceding a Reply-To header...
Icewarp Webmail Server 2.10.170Icewarp Webmail Server 2.10.200Icewarp Webmail Server 2.10.290Icewarp Webmail Server 2.10.320Icewarp Webmail Server 3.00.120Icewarp Webmail Server 3.00.130Icewarp Webmail Server 4.2.1Icewarp Webmail Server 4.2.2Icewarp Webmail Server 5.4.1Icewarp Webmail Server 5.4.2Icewarp Webmail Server 5.5.7Icewarp Webmail Server 5.7.3Icewarp Webmail Server 6.0.2Icewarp Webmail Server 6.0.3Icewarp Webmail Server 6.0.5Icewarp Webmail Server 7.1.6Icewarp Webmail Server 7.2.0Icewarp Webmail Server 8.0.1Icewarp Webmail Server 8.0.3Icewarp Webmail Server 8.9.1Icewarp Webmail Server 9.0.0Icewarp Webmail Server 9.1.0
NA
CVE-2009-1467
Multiple cross-site scripting (XSS) vulnerabilities in IceWarp eMail Server and WebMail Server prior to 9.4.2 allow remote malicious users to inject arbitrary web script or HTML via (1) the body of a message, related to the email view and incorrect HTML filtering in the cleanHTML...
Icewarp Webmail Server 2.10.115Icewarp Webmail Server 2.10.150Icewarp Webmail Server 2.10.240Icewarp Webmail Server 2.10.250Icewarp Webmail Server 2.10.340Icewarp Webmail Server 2.10.350Icewarp Webmail Server 3.10.110Icewarp Webmail Server 4.00.30Icewarp Webmail Server 4.4.2Icewarp Webmail Server 5.1.2Icewarp Webmail Server 5.5.3Icewarp Webmail Server 5.5.4Icewarp Webmail Server 5.8.4Icewarp Webmail Server 5.8.5Icewarp Webmail Server 6.1.0Icewarp Webmail Server 6.2.1Icewarp Webmail Server 7.4.5Icewarp Webmail Server 7.5.2Icewarp Webmail Server 8.2.2Icewarp Webmail Server 8.3.5Icewarp Webmail Server 2.10.110Icewarp Webmail Server 9.2.0
NA
CVE-2009-1468
Multiple SQL injection vulnerabilities in the search form in server/webmail.php in the Groupware component in IceWarp eMail Server and WebMail Server prior to 9.4.2 allow remote authenticated users to execute arbitrary SQL commands via the (1) sql and (2) order_by elements in an ...
Icewarp Webmail Server 2.10.210Icewarp Webmail Server 2.10.220Icewarp Webmail Server 2.10.320Icewarp Webmail Server 2.10.330Icewarp Webmail Server 3.00.140Icewarp Webmail Server 2.10.170Icewarp Webmail Server 3.10.011Icewarp Webmail Server 4.2.3Icewarp Webmail Server 4.4.1Icewarp Webmail Server 5.4.2Icewarp Webmail Server 5.4.3Icewarp Webmail Server 5.8.2Icewarp Webmail Server 5.8.3Icewarp Webmail Server 6.0.5Icewarp Webmail Server 6.0.7Icewarp Webmail Server 7.2.0Icewarp Webmail Server 7.4.0Icewarp Webmail Server 8.0.2Icewarp Webmail Server 8.2.0Icewarp Webmail Server 9.1.0Icewarp Webmail ServerIcewarp Email Server 2.10.110
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48700CVE-2022-48689CVE-2024-27956CVE-2023-6363SQLNULL pointer dereferenceCVE-2023-41830CVE-2015-2051arbitrary
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook