Vulnerabilities > Argosoft > Argosoft Mail Server > High

DATE CVE VULNERABILITY TITLE RISK
2005-05-02 CVE-2005-1284 Unspecified vulnerability in Argosoft Mail Server 1.8.7.6
The addnew script in Argosoft Mail Server Pro 1.8.7.6 allows remote attackers to create arbitrary accounts, even if "Allow Creation of Accounts From the Web Interface" is disabled, via a direct HTTP POST request.
network
low complexity
argosoft
7.5
2005-04-22 CVE-2005-1283 Directory Traversal vulnerability in Argosoft Mail Server 1.8.7.6
Multiple directory traversal vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote authenticated users to (1) read arbitrary files via the UIDL parameter to the msg script or (2) copy or move the user's .eml file to arbitrary locations via the delete script, a different vulnerability than CVE-2005-0367.
network
low complexity
argosoft
7.5