Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
merak mail server vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2007-5046
Cross-site scripting (XSS) vulnerability in the Webmail interface for IceWarp Merak Mail Server prior to 9.0.0 allows remote malicious users to inject arbitrary JavaScript via a javascript: URI in an attribute of an element in an email message body, as demonstrated by the onload ...
Icewarp Merak Mail Server 8.9.1
Icewarp Merak Mail Server 8.9.2
7.2
CVSSv2
CVE-2005-0322
MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 and Mail Server 7.6.4r with Icewarp Mail Server 5.3.2 uses weak encryption in the (1) users.cfg, (2) settings.cfg, (3) users.dat or (4) user.dat files, which allows local users to extract the passwords.
Icewarp Web Mail 5.3.0
Icewarp Web Mail 5.3.2
Merak Mail Server 7.6.0
Merak Mail Server 7.6.4r
7.5
CVSSv2
CVE-2002-0258
Merak Mail IceWarp Web Mail uses a static identifier as a user session ID that does not change across sessions, which could allow remote attackers with access to the ID to gain privileges as that user, e.g. by extracting the ID from the user's answer or forward URLs.
Merak Mail Server
Icewarp Web Mail
4.3
CVSSv2
CVE-2008-0218
Cross-site scripting (XSS) vulnerability in admin/index.html in Merak IceWarp Mail Server allows remote malicious users to inject arbitrary web script or HTML via the message parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from thir...
Merak Icewarp Mail Server
1 EDB exploit
5
CVSSv2
CVE-2004-1721
The (1) function.php or (2) function.view.php scripts in Merak Mail Server 5.2.7 allow remote malicious users to read arbitrary PHP files via a direct HTTP request to port 32000.
Merak Mail Server 5.2.7
4.3
CVSSv2
CVE-2004-1719
Multiple cross-site scripting (XSS) vulnerabilities in Merak Webmail Server 5.2.7 allow remote malicious users to inject arbitrary web script or HTML via the (1) category, (2) cserver, (3) ext, (4) global, (5) showgroups, (6) or showlite parameters to address.html, or the (7) spa...
Merak Mail Server 7.4.5
4 EDB exploits
5
CVSSv2
CVE-2004-1720
The (1) address.html and possibly (2) calendar.html pages in Merak Mail Server 5.2.7 allow remote malicious users to gain sensitive information via an invalid HTTP request, which reveals the installation path. NOTE: it is unclear whether the calendar.html is an exposure, since th...
Merak Mail Server 7.4.5
1 EDB exploit
7.5
CVSSv2
CVE-2004-1722
SQL injection vulnerability in calendar.html in Merak Mail Server 5.2.7 allows remote malicious users to execute arbitrary SQL statements via the schedule parameter.
Merak Mail Server 7.5.2
1 EDB exploit
4.3
CVSSv2
CVE-2005-3131
Multiple cross-site scripting (XSS) vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allow remote malicious users to inject arbitrary web script or HTML via the (1) id parameter to blank.html, or the createdataCX parameter to...
Merak Mail Server 8.2.4r
Icewarp Web Mail 5.5.1
4 EDB exploits
1.9
CVSSv2
CVE-2005-1488
Multiple cross-site scripting (XSS) vulnerabilities in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allow remote authenticated users to inject arbitrary web script or HTML via (1) the E-mail address, Note, or Public Certificate fields to address.html, (2) addressaction.htm...
Icewarp Web Mail 5.4.2
Merak Mail Server 8.0.3
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
man-in-the-middle
CVE-2024-34558
CVE-2024-32674
CVE-2024-34351
XPath injection
CVE-2023-45866
CVE-2024-25528
CVE-2024-25517
path traversal
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
NEXT »