Vulnerabilities > Mailwasher

DATE CVE VULNERABILITY TITLE RISK
2007-06-19 CVE-2007-3275 Credentials Management vulnerability in Mailwasher Server
MailWasher Server before 2.2.1, when used with LDAP or Active Directory (AD), does not properly handle blank passwords, which allows remote attackers to access an arbitrary user account and read the spam e-mail messages stored for that account, possibly related to the LoginCheck::doPost function in mwi/servlet/Login.cpp.
7.1