Vulnerabilities > Icewarp

DATE CVE VULNERABILITY TITLE RISK
2005-05-11 CVE-2005-1489 Remote Security vulnerability in Mail Server
Unknown vulnerability in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allows remote authenticated users to obtain the full path of the server via certain requests to (1) calendar_addevent.html, (2) calendar_event.html, or (3) calendar_task.html.
network
low complexity
icewarp merak
5.0
2005-05-11 CVE-2005-1490 Local Security vulnerability in Mail Server
Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2, when the mailbox.dat file does not exist, allows remote authenticated users to determine if a file exists via the folder parameter to attachment.html.
local
low complexity
icewarp merak
2.1
2005-05-11 CVE-2005-1491 Local Security vulnerability in Mail Server
Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allows remote authenticated users to (1) move their home directory via viewaction.html or (2) move arbitrary files via the importfile parameter to importaction.html.
local
low complexity
icewarp merak
4.6
2005-05-02 CVE-2005-0321 Information Disclosure vulnerability in Mail Server
MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allows remote authenticated users to gain sensitive information via an HTTP request to (1) calendar_d.html, (2) calendar_m.html, (3) calendar_w.html, or (4) calendar_y.html, which reveal the installation path.
local
low complexity
icewarp merak
2.1
2005-05-02 CVE-2005-0322 Local Security vulnerability in Mail Server
MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 and Mail Server 7.6.4r with Icewarp Mail Server 5.3.2 uses weak encryption in the (1) users.cfg, (2) settings.cfg, (3) users.dat or (4) user.dat files, which allows local users to extract the passwords.
local
low complexity
icewarp merak
7.2
2005-01-28 CVE-2005-0320 Remote vulnerability in Icewarp web Mail 5.3
Multiple cross-site scripting vulnerabilities in MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter to login.html, (2) accountid parameter to accountsettings_add.html, or the (3) note, (4) title, and (5) location fields to calendar.html.
network
low complexity
icewarp
5.0
2004-10-12 CVE-2004-1671 Remote Input Validation vulnerability in IceWarp Web Mail 3.3.2/5.2.7/5.2.8
Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to gain sensitive information via a direct request to (1) accountsettings_add.html or (2) topmenu.html.
network
low complexity
icewarp
5.0
2004-10-12 CVE-2004-1672 Remote Input Validation vulnerability in IceWarp Web Mail 3.3.2/5.2.7/5.2.8
attachment.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to view other users' attachments by specifying the username and message ID in an HTTP request.
network
low complexity
icewarp
7.5
2004-10-12 CVE-2004-1673 Remote Input Validation vulnerability in IceWarp Web Mail 3.3.2/5.2.7/5.2.8
accountsettings_add.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allow remote attackers to create text files with arbitrary content via the accountid parameter.
network
low complexity
icewarp
7.5
2004-10-12 CVE-2004-1674 Remote Input Validation vulnerability in IceWarp Web Mail
viewaction.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to (1) delete arbitrary files via the originalfolder parameter or (2) move arbitrary files via the messageid parameter.
network
low complexity
icewarp merak
7.5