Vulnerabilities > Open Webmail > Open Webmail > 1.90

DATE CVE VULNERABILITY TITLE RISK
2004-12-31 CVE-2004-2458 Unspecified vulnerability in Open Webmail Open Webmail
Open WebMail 2.30 and earlier, when use_syshomedir is disabled or create_syshomedir is enabled, creates new directories before authenticating, which allows remote attackers to create arbitrary directories.
network
low complexity
open-webmail
5.0
2004-12-31 CVE-2004-2284 Remote Command Execution Variant vulnerability in Open WebMail Vacation.PL
The read_list_from_file function in vacation.pl for OpenWebmail before 2.32 20040629 allows remote attackers to execute arbitrary commands via shell metacharacters in a filename argument.
network
low complexity
open-webmail
critical
10.0