OW
Product
Open Webmail
13
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Open Webmail to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2007-4172 | – | Aug 7 | Multiple cross-site scripting (XSS) vulnerabilities in Open Webmail (OWM) 2.52 20060831 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1)… Affected: through 2.52 |
| CVE-2006-3233 | – | Jun 27 | Cross-site scripting (XSS) vulnerability in openwebmail-read.pl in Open WebMail (OWM) 2.52, and other versions released before 06/18/2006, allows remote attackers to inject… Affected: through 2.52; 1.7; 1.8; 1.71; 1.81; 1.90; +8 more |
| CVE-2006-3229 | – | Jun 27 | Cross-site scripting (XSS) vulnerability in Open WebMail (OWM) 2.52, and other versions released before 05/12/2006, allows remote attackers to inject arbitrary web script or HTML… Affected: through 2.52; 1.7; 1.8; 1.71; 1.81; 1.90; +8 more |
| CVE-2006-2190 | – | May 4 | Cross-site scripting (XSS) vulnerability in ow-shared.pl in OpenWebMail (OWM) 2.51 and earlier allows remote attackers to inject arbitrary web script or HTML via the sessionid… Affected: through 2.51; 1.7; 1.8; 1.71; 1.81; 1.90; +11 more |
| CVE-2005-2863 | – | Sep 8 | Cross-site scripting (XSS) vulnerability in openwebmail-main.pl in OpenWebMail 2.41 allows remote attackers to inject arbitrary web script or HTML via the sessionid parameter Affected: 2.41 |
| CVE-2005-1435 | – | May 3 | Open WebMail (OWM) before 2.51 20050430 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a filename Affected: through 2.51 |
| CVE-2005-0445 | – | May 2 | Cross-site scripting (XSS) vulnerability in Open WebMail 2.x allows remote attackers to inject arbitrary HTML or web script via the domain name parameter (logindomain) in the… Affected: 2.00; 2.01; 2.10; 2.20; 2.21; 2.30; +4 more |
| CVE-2004-2458 | – | Dec 31 | Open WebMail 2.30 and earlier, when use_syshomedir is disabled or create_syshomedir is enabled, creates new directories before authenticating, which allows remote attackers to… Affected: 1.7; 1.8; 1.71; 1.81; 1.90; 2.30 |
| CVE-2004-2284 | – | Dec 31 | The read_list_from_file function in vacation.pl for OpenWebmail before 2.32 20040629 allows remote attackers to execute arbitrary commands via shell metacharacters in a filename… Affected: 1.7; 1.8; 1.71; 1.81; 1.90; 2.20; +4 more |
| CVE-2004-0520 | – | Aug 18 | Cross-site scripting (XSS) vulnerability in mime.php for SquirrelMail before 1.4.3 allows remote attackers to insert arbitrary HTML and script via the content-type mail header, as… Affected: 2.30; 2.31; 2.32 |
| CVE-2004-0639 | – | Aug 6 | Multiple cross-site scripting (XSS) vulnerabilities in Squirrelmail 1.2.10 and earlier allow remote attackers to inject arbitrary HTML or script via (1) the $mailer variable in… Affected: 2.30; 2.31; 2.32 |
| CVE-2002-2410 | – | Dec 31 | openwebmail.pl in Open WebMail 1.7 and 1.71 reveals sensitive information in error messages and generates different responses whether a user exists or not, which allows remote… Affected: 1.7; 1.71 |
| CVE-2002-1385 | – | Dec 26 | openwebmail_init in Open WebMail 1.81 and earlier allows local users to execute arbitrary code via Affected: 1.7; 1.8; 1.71; 1.81 |
Showing 13