Login Request a demo
SQ
Product
Sqwebmail
by Inter7 · last CVE Sep 7, 2005
6
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 0Medium 0Low 0
Severity
All severities6Critical0High0Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Sqwebmail to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2005-2820
–
2%
Sep 7
Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 allows remote attackers to inject arbitrary web script or HTML via an e-mail message containing Internet Explorer…
Affected: 5.0.4
CVE-2005-2769
–
3%
Sep 2
Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 and possibly other versions allows remote attackers to inject arbitrary web script or HTML via an HTML e-mail…
Affected: 5.0.4
CVE-2005-2724
–
2%
Aug 30
Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 allows remote attackers to inject arbitrary web script or HTML via a file attachment that is processed by the Display…
Affected: 3.4.1; 3.5.0; 3.5.1; 3.5.2; 3.5.3; 3.6.0; +8 more
CVE-2005-1308
–
2%
Apr 15
SqWebMail allows remote attackers to inject arbitrary web script or HTML via CRLF sequences in the redirect parameter followed by the desired script or HTML
Affected: 3.4.1; 3.5.0; 3.5.1; 3.5.2; 3.5.3; 3.6.0; +3 more
CVE-2004-2313
–
2%
Dec 31
Inter7 SqWebMail 3.4.1 through 3.6.1 generates different error messages for incorrect passwords versus correct passwords on non-mail-enabled accounts (such as root), which allows…
Affected: 3.4.1; 3.5.0; 3.5.1; 3.5.2; 3.5.3; 3.6.0; +1 more
CVE-2004-0591
–
5%
Aug 6
Cross-site scripting (XSS) vulnerability in the print_header_uc function for SqWebMail 4.0.4 and earlier, and possibly 3.x, allows remote attackers to inject arbitrary web script…
Affected: 4.0.4
Showing 6