Vulnerabilities > V Webmail > V Webmail > 1.6.2

DATE CVE VULNERABILITY TITLE RISK
2006-02-19 CVE-2006-0794 Remote Security vulnerability in V-Webmail 1.6.1/1.6.2
help.php in V-webmail 1.6.2 allows remote attackers to obtain the installation path via unspecified invalid parameters.
network
low complexity
v-webmail
5.0
2006-02-19 CVE-2006-0793 Cross-Site Scripting vulnerability in V-Webmail 1.6.1/1.6.2
frameset.php in V-webmail 1.6.2 allows remote attackers to conduct phishing attacks by referencing arbitrary websites in the rframe parameter.
network
low complexity
v-webmail
5.0
2006-02-19 CVE-2006-0792 Cross-Site Scripting vulnerability in V-Webmail 1.6.1/1.6.2
Cross-site scripting (XSS) vulnerability in preferences.personal.php in V-webmail 1.6.2 allows remote attackers to inject arbitrary web script or HTML via the newid parameter.
network
v-webmail
4.3