Vulnerabilities > Cybozu > Mailwise > 3.0.0.2

DATE CVE VULNERABILITY TITLE RISK
2013-04-25 CVE-2013-2305 Cross-Site Request Forgery (CSRF) vulnerability in Cybozu Dezie, Cybozu Office and Mailwise
Cross-site request forgery (CSRF) vulnerability in Cybozu Office before 8.1.6 and 9.x before 9.3.0, Cybozu Dezie before 8.0.7, and Cybozu Mailwise before 5.0.4 allows remote attackers to hijack the authentication of arbitrary users for requests that change passwords.
network
cybozu CWE-352
6.8
2006-08-31 CVE-2006-4491 Directory Traversal vulnerability in Cybozu Ag
Directory traversal vulnerability in Cybozu Collaborex, AG before 1.2(1.5), AG Pocket before 5.2(0.8), Mailwise before 3.0(0.3), and Garoon 1 before 1.5(4.1) allows remote authenticated users to read arbitrary files via unspecified vectors.
network
low complexity
cybozu
4.0