Vulnerabilities > Icewarp > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2019-10-11 | CVE-2010-5335 | Path Traversal vulnerability in Icewarp Webclient 10.0/10.1.3/10.2.0 IceWarp Webclient before 10.2.1 has a directory traversal vulnerability. | 7.8 |
| 2019-10-11 | CVE-2010-5334 | Path Traversal vulnerability in Icewarp Webclient 10.0/10.1.3/10.2.0 IceWarp Webclient before 10.2.1 has a directory traversal vulnerability. | 7.8 |
| 2018-05-08 | CVE-2015-1503 | Path Traversal vulnerability in Icewarp Mail Server Multiple directory traversal vulnerabilities in IceWarp Mail Server before 11.2 allow remote attackers to read arbitrary files via a (1) .. | 7.8 |
| 2009-05-04 | CVE-2009-1516 | Buffer Errors vulnerability in Icewarp Merak Mail Server 9.4.1 Stack-based buffer overflow in the IceWarpServer.APIObject ActiveX control in api.dll in IceWarp Merak Mail Server 9.4.1 might allow context-dependent attackers to execute arbitrary code via a large value in the second argument to the Base64FileEncode method, as possibly demonstrated by a web application that accepts untrusted input for this method. | 7.5 |
| 2005-12-28 | CVE-2005-4556 | Input Validation vulnerability in IceWarp Universal WebMail PHP remote file include vulnerability in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, when register_globals is enabled, allows remote attackers to include arbitrary local and remote PHP files via a URL in the (1) lang_settings and (2) language parameters in (a) accounts/inc/include.php and (b) admin/inc/include.php. | 7.5 |
| 2005-05-02 | CVE-2005-0322 | Local Security vulnerability in Mail Server MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 and Mail Server 7.6.4r with Icewarp Mail Server 5.3.2 uses weak encryption in the (1) users.cfg, (2) settings.cfg, (3) users.dat or (4) user.dat files, which allows local users to extract the passwords. | 7.2 |
| 2004-10-12 | CVE-2004-1674 | Remote Input Validation vulnerability in IceWarp Web Mail viewaction.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to (1) delete arbitrary files via the originalfolder parameter or (2) move arbitrary files via the messageid parameter. | 7.5 |
| 2004-10-12 | CVE-2004-1673 | Remote Input Validation vulnerability in IceWarp Web Mail 3.3.2/5.2.7/5.2.8 accountsettings_add.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allow remote attackers to create text files with arbitrary content via the accountid parameter. | 7.5 |
| 2004-10-12 | CVE-2004-1672 | Remote Input Validation vulnerability in IceWarp Web Mail 3.3.2/5.2.7/5.2.8 attachment.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to view other users' attachments by specifying the username and message ID in an HTTP request. | 7.5 |
| 2004-09-10 | CVE-2004-1670 | Remote Input Validation vulnerability in IceWarp Web Mail Multiple directory traversal vulnerabilities Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7, and possibly other versions, allow remote attackers to (1) create arbitrary directories via a .. | 7.5 |