| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2005-4557 | 5.0 |
dir/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, allows remote attackers to include arbitrary local files via a null byte (%00) in the lang parameter, possibly due to a di
|
19-10-2018 - 15:41 | 28-12-2005 - 11:03 | |
| CVE-2005-4556 | 7.5 |
PHP remote file include vulnerability in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, when register_globals is enabled, allows remote attackers to include arbitrary local and remote PHP f
|
19-10-2018 - 15:41 | 28-12-2005 - 11:03 | |
| CVE-2005-4558 | 6.5 |
IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not properly restrict acceptable values for the language parameter to mail/settings.html before it is stored in a database, which can all
|
19-10-2018 - 15:41 | 28-12-2005 - 11:03 | |
| CVE-2005-4559 | 5.0 |
mail/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not properly initialize the default_layout and layout_settings variables when an unrecognized HTTP_USER_AGENT string
|
19-10-2018 - 15:41 | 28-12-2005 - 11:03 | |
| CVE-2005-3133 | 5.0 |
Multiple directory traversal vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allows remote attackers to (1) delete arbitrary files or directories via a relative path to the id parameter to logou
|
18-10-2016 - 03:32 | 04-10-2005 - 22:02 | |
| CVE-2005-3131 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to blank.html, or the c
|
18-10-2016 - 03:32 | 04-10-2005 - 22:02 | |
| CVE-2005-3132 | 5.0 |
MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to bwlist_inc.html, which reveals the path in an error message.
|
18-10-2016 - 03:32 | 04-10-2005 - 22:02 |