Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: IceWarp Component: Webmail Server Clear all filters
TI-2009-01393 CVE-2009-1469 · GHSA-gm32-4vhp-pm77

CRLF injection vulnerability in the Forgot Password implementation in server/webmail.php…

Priority LOW 28

CRLF injection vulnerability in the Forgot Password implementation in server/webmail.php in IceWarp eMail Server and WebMail Server before 9.4.2 makes it easier for remote attackers to trick a user into disclosing creden…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.04863 Published 2009-05-05 No fix listed CWE-94
TI-2009-01392 CVE-2009-1468 · GHSA-2q28-m2rp-3xjj

Multiple SQL injection vulnerabilities in the search form in server/webmail.php in the…

Priority LOW 33

Multiple SQL injection vulnerabilities in the search form in server/webmail.php in the Groupware component in IceWarp eMail Server and WebMail Server before 9.4.2 allow remote authenticated users to execute arbitrary SQL…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01925 Published 2009-05-05 No fix listed CWE-89