Open Xchange

DATE	CVE	VULNERABILITY TITLE	RISK
2006-06-01	CVE-2006-2738	Unspecified vulnerability in Open-Xchange 0.8.1.6 The open source version of Open-Xchange 0.8.2 and earlier uses a static default username and password with a valid login shell in the initfile for the ldap-server, which allows remote attackers to access any server where the default has not been changed. network low complexity open-xchange	7.5
2006-01-05	CVE-2006-0091	Cross-Site Scripting vulnerability in Open-Xchange Cross-site scripting (XSS) vulnerability in webmail in Open-Xchange 0.8.1-6 and earlier, with "Inline HTML" enabled, allows remote attackers to inject arbitrary web script or HTML via e-mail attachments, which are rendered inline. network open-xchange	4.3