Vulnerabilities > Barracuda Networks > Barracuda Spam Firewall > 3.1.10

DATE CVE VULNERABILITY TITLE RISK
2008-05-23 CVE-2008-2333 Cross-Site Scripting vulnerability in Barracuda Networks Barracuda Spam Firewall
Cross-site scripting (XSS) vulnerability in ldap_test.cgi in Barracuda Spam Firewall (BSF) before 3.5.11.025 allows remote attackers to inject arbitrary web script or HTML via the email parameter.
4.3
2005-05-02 CVE-2005-0431 Remote Security vulnerability in Barracuda Networks Barracuda Spam Firewall 3.1.10
Barracuda Spam Firewall 3.1.10 and earlier does not restrict the domains that white-listed domains can send mail to, which allows members of white-listed domains to use Barracuda as an open mail relay for spam.
network
low complexity
barracuda-networks
7.5