Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

icewarp webmail server vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2009-1467
Multiple cross-site scripting (XSS) vulnerabilities in IceWarp eMail Server and WebMail Server prior to 9.4.2 allow remote malicious users to inject arbitrary web script or HTML via (1) the body of a message, related to the email view and incorrect HTML filtering in the cleanHTML...
Icewarp Webmail Server 2.10.115Icewarp Webmail Server 2.10.150Icewarp Webmail Server 2.10.240Icewarp Webmail Server 2.10.250Icewarp Webmail Server 2.10.340Icewarp Webmail Server 2.10.350Icewarp Webmail Server 3.10.110Icewarp Webmail Server 4.00.30Icewarp Webmail Server 4.4.2Icewarp Webmail Server 5.1.2Icewarp Webmail Server 5.5.3Icewarp Webmail Server 5.5.4Icewarp Webmail Server 5.8.4Icewarp Webmail Server 5.8.5Icewarp Webmail Server 6.1.0Icewarp Webmail Server 6.2.1Icewarp Webmail Server 7.4.5Icewarp Webmail Server 7.5.2Icewarp Webmail Server 8.2.2Icewarp Webmail Server 8.3.5Icewarp Webmail Server 2.10.110Icewarp Webmail Server 9.2.0
6.5
CVSSv2
CVE-2009-1468
Multiple SQL injection vulnerabilities in the search form in server/webmail.php in the Groupware component in IceWarp eMail Server and WebMail Server prior to 9.4.2 allow remote authenticated users to execute arbitrary SQL commands via the (1) sql and (2) order_by elements in an ...
Icewarp Webmail Server 2.10.210Icewarp Webmail Server 2.10.220Icewarp Webmail Server 2.10.320Icewarp Webmail Server 2.10.330Icewarp Webmail Server 3.00.140Icewarp Webmail Server 2.10.170Icewarp Webmail Server 3.10.011Icewarp Webmail Server 4.2.3Icewarp Webmail Server 4.4.1Icewarp Webmail Server 5.4.2Icewarp Webmail Server 5.4.3Icewarp Webmail Server 5.8.2Icewarp Webmail Server 5.8.3Icewarp Webmail Server 6.0.5Icewarp Webmail Server 6.0.7Icewarp Webmail Server 7.2.0Icewarp Webmail Server 7.4.0Icewarp Webmail Server 8.0.2Icewarp Webmail Server 8.2.0Icewarp Webmail Server 9.1.0Icewarp Webmail ServerIcewarp Email Server 2.10.110
4.3
CVSSv2
CVE-2009-1469
CRLF injection vulnerability in the Forgot Password implementation in server/webmail.php in IceWarp eMail Server and WebMail Server prior to 9.4.2 makes it easier for remote malicious users to trick a user into disclosing credentials via CRLF sequences preceding a Reply-To header...
Icewarp Webmail Server 2.10.170Icewarp Webmail Server 2.10.200Icewarp Webmail Server 2.10.290Icewarp Webmail Server 2.10.320Icewarp Webmail Server 3.00.120Icewarp Webmail Server 3.00.130Icewarp Webmail Server 4.2.1Icewarp Webmail Server 4.2.2Icewarp Webmail Server 5.4.1Icewarp Webmail Server 5.4.2Icewarp Webmail Server 5.5.7Icewarp Webmail Server 5.7.3Icewarp Webmail Server 6.0.2Icewarp Webmail Server 6.0.3Icewarp Webmail Server 6.0.5Icewarp Webmail Server 7.1.6Icewarp Webmail Server 7.2.0Icewarp Webmail Server 8.0.1Icewarp Webmail Server 8.0.3Icewarp Webmail Server 8.9.1Icewarp Webmail Server 9.0.0Icewarp Webmail Server 9.1.0
5
CVSSv2
CVE-2011-3580
IceWarp WebMail in IceWarp Mail Server prior to 10.3.3 allows remote malicious users to obtain configuration information via a direct request to the /server URI, which triggers a call to the phpinfo function.
Icewarp Mail Server 10.0.7Icewarp Mail Server 10.0.8Icewarp Mail Server 10.0.3Icewarp Mail Server 10.0.4Icewarp Mail Server 10.2.1Icewarp Mail Server 10.2.2Icewarp Mail Server 9.4.1Icewarp Mail Server 9.4.0Icewarp Mail Server 10.1.2Icewarp Mail Server 10.1.3Icewarp Mail Server 9.3.1Icewarp Mail Server 9.3.2Icewarp Mail Server 10.1.1Icewarp Mail Server 10.3.0Icewarp Mail Server 9.3.0Icewarp Mail Server 9.4.2Icewarp Mail Server 10.3.1Icewarp Mail Server 10.1.4Icewarp Mail Server 10.2.0Icewarp Mail Server
6.4
CVSSv2
CVE-2011-3579
server/webmail.php in IceWarp WebMail in IceWarp Mail Server prior to 10.3.3 allows remote malicious users to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaratio...
Icewarp Mail Server 10.0.3Icewarp Mail Server 10.0.4Icewarp Mail Server 10.2.1Icewarp Mail Server 10.2.2Icewarp Mail Server 9.4.2Icewarp Mail ServerIcewarp Mail Server 10.3.1Icewarp Mail Server 10.1.4Icewarp Mail Server 10.2.0Icewarp Mail Server 9.4.0Icewarp Mail Server 9.4.1Icewarp Mail Server 10.0.7Icewarp Mail Server 10.0.8Icewarp Mail Server 10.1.1Icewarp Mail Server 10.3.0Icewarp Mail Server 9.3.0Icewarp Mail Server 10.1.2Icewarp Mail Server 10.1.3Icewarp Mail Server 9.3.1Icewarp Mail Server 9.3.2
4.3
CVSSv2
CVE-2020-8512
In IceWarp Webmail Server up to and including 11.4.4.1, there is XSS in the /webmail/ color parameter.
Icewarp Icewarp Server
4.3
CVSSv2
CVE-2020-27982
IceWarp 11.4.5.0 allows XSS via the language parameter.
Icewarp Mail Server 11.4.5
4.3
CVSSv2
CVE-2007-5046
Cross-site scripting (XSS) vulnerability in the Webmail interface for IceWarp Merak Mail Server prior to 9.0.0 allows remote malicious users to inject arbitrary JavaScript via a javascript: URI in an attribute of an element in an email message body, as demonstrated by the onload ...
Icewarp Merak Mail Server 8.9.1Icewarp Merak Mail Server 8.9.2
6.5
CVSSv2
CVE-2005-4558
IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not properly restrict acceptable values for the language parameter to mail/settings.html before it is stored in a database, which can allow remote authenticated users ...
Merak Mail Server 8.3.0rDeerfield Visnetic Mail Server 8.3.0 Build1Icewarp Web Mail 5.5.1
7.5
CVSSv2
CVE-2005-4556
PHP remote file include vulnerability in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, when register_globals is enabled, allows remote malicious users to include arbitrary local and remote PHP files via a URL in the (1...
Merak Mail Server 8.3.0rDeerfield Visnetic Mail Server 8.3.0 Build1Icewarp Web Mail 5.5.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook