Open Webmail - vulnerabilities (CVEs)
13 CVEs in 1 products, 0 in the last 30 days, newest from 2007-08-07.
Products
- Open Webmail - 13 CVEs
Newest CVEs of Open Webmail
- CVE-2007-4172 - CVSS 4.3 (medium), 2007-08-07: Multiple cross-site scripting (XSS) vulnerabilities in Open Webmail (OWM) 2.52 20060831 and earlier allow remote attackers to inject arbitrary web script or…
- CVE-2006-3233 - CVSS 4.3 (medium), 2006-06-27: Cross-site scripting (XSS) vulnerability in openwebmail-read.pl in Open WebMail (OWM) 2.52, and other versions released before 06/18/2006, allows remote…
- CVE-2006-3229 - CVSS 4.3 (medium), 2006-06-27: Cross-site scripting (XSS) vulnerability in Open WebMail (OWM) 2.52, and other versions released before 05/12/2006, allows remote attackers to inject…
- CVE-2006-2190 - CVSS 6.8 (medium), 2006-05-04: Cross-site scripting (XSS) vulnerability in ow-shared.pl in OpenWebMail (OWM) 2.51 and earlier allows remote attackers to inject arbitrary web script or HTML…
- CVE-2005-2863 - CVSS 4.3 (medium), 2005-09-08: Cross-site scripting (XSS) vulnerability in openwebmail-main.pl in OpenWebMail 2.41 allows remote attackers to inject arbitrary web script or HTML via the…
- CVE-2005-1435 - CVSS 7.5 (high), 2005-05-03: Open WebMail (OWM) before 2.51 20050430 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a filename.
- CVE-2005-0445 - CVSS 4.3 (medium), 2005-05-02: Cross-site scripting (XSS) vulnerability in Open WebMail 2.x allows remote attackers to inject arbitrary HTML or web script via the domain name parameter…
- CVE-2004-2458 - CVSS 5 (medium), 2004-12-31: Open WebMail 2.30 and earlier, when use_syshomedir is disabled or create_syshomedir is enabled, creates new directories before authenticating, which allows…
- CVE-2004-2284 - CVSS 10 (critical), 2004-12-31: The read_list_from_file function in vacation.pl for OpenWebmail before 2.32 20040629 allows remote attackers to execute arbitrary commands via shell…
- CVE-2004-0520 - CVSS 6.8 (medium), 2004-08-18: Cross-site scripting (XSS) vulnerability in mime.php for SquirrelMail before 1.4.3 allows remote attackers to insert arbitrary HTML and script via the…
- CVE-2004-0639 - CVSS 6.8 (medium), 2004-08-06: Multiple cross-site scripting (XSS) vulnerabilities in Squirrelmail 1.2.10 and earlier allow remote attackers to inject arbitrary HTML or script via (1) the…
- CVE-2002-2410 - CVSS 5 (medium), 2002-12-31: openwebmail.pl in Open WebMail 1.7 and 1.71 reveals sensitive information in error messages and generates different responses whether a user exists or not,…
- CVE-2002-1385 - CVSS 7.2 (high), 2002-12-26: openwebmail_init in Open WebMail 1.81 and earlier allows local users to execute arbitrary code via .. (dot dot) sequences in a login name, such as the name…
