Browse CVEs

MEDIUM 6.8 CVE-2006-2190 Cross-site scripting (XSS) vulnerability in ow-shared.pl in OpenWebMail (OWM) 2.51 and earlier allows remote attackers to inject arbitrary web script… Open Webmail after 2.51 Fix from $1,6002006-05-04 HIGH 7.5 CVE-2005-1435 Open WebMail (OWM) before 2.51 20050430 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a filename. Open Webmail after 2.51 Fix from $1,9502005-05-03 HIGH 10.0 CVE-2004-2284 The read_list_from_file function in vacation.pl for OpenWebmail before 2.32 20040629 allows remote attackers to execute arbitrary commands via shell … Open Webmail Patch available Fix from $1,9502004-12-31 MEDIUM 5.0 CVE-2004-2458 Open WebMail 2.30 and earlier, when use_syshomedir is disabled or create_syshomedir is enabled, creates new directories before authenticating, which … Open Webmail Patch available Fix from $1,6002004-12-31 MEDIUM 6.8 CVE-2004-0520EPSS 7% Cross-site scripting (XSS) vulnerability in mime.php for SquirrelMail before 1.4.3 allows remote attackers to insert arbitrary HTML and script via th… Open Webmail Patch available Fix from $1,6002004-08-18 MEDIUM 6.8 CVE-2004-0639EPSS 6% Multiple cross-site scripting (XSS) vulnerabilities in Squirrelmail 1.2.10 and earlier allow remote attackers to inject arbitrary HTML or script via … Open Webmail Patch available Fix from $1,6002004-08-06 MEDIUM 5.0 CVE-2002-2410 openwebmail.pl in Open WebMail 1.7 and 1.71 reveals sensitive information in error messages and generates different responses whether a user exists o… Open Webmail No fix yet Fix from $1,6002002-12-31 HIGH 7.2 CVE-2002-1385 openwebmail_init in Open WebMail 1.81 and earlier allows local users to execute arbitrary code via .. (dot dot) sequences in a login name, such as th… Open Webmail Patch available Fix from $1,9502002-12-26