Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: Calacode Clear all filters
TI-2008-03426 CVE-2008-3579 · GHSA-969c-936f-xr59

Calacode @Mail 5.41 on Linux does not require administrative authentication for…

Priority LOW 38

Calacode @Mail 5.41 on Linux does not require administrative authentication for build-plesk-upgrade.php, which allows remote attackers to obtain sensitive information by creating and downloading a backup archive of the e…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.02076 Published 2008-08-10 No fix listed CWE-287
TI-2008-03256 CVE-2008-3395 · GHSA-pj65-hgjq-jjx9

Calacode @Mail 5.41 on Linux uses weak world-readable permissions for (1)…

Priority LOW 26

Calacode @Mail 5.41 on Linux uses weak world-readable permissions for (1) webmail/libs/Atmail/Config.php and (2) webmail/webadmin/.htpasswd, which allows local users to obtain sensitive information by reading these files…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01332 Published 2008-07-31 No fix listed CWE-264
TI-2006-00820 CVE-2006-0842 · GHSA-ccr4-pq4v-qcvc

Cross-site scripting (XSS) vulnerability in Calacode @Mail 4.3 allows remote attackers to…

Priority LOW 24

Cross-site scripting (XSS) vulnerability in Calacode @Mail 4.3 allows remote attackers to inject arbitrary web script or HTML via a modified javascript: string in the SRC attribute of an IMG element in an e-mail message,…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01833 Published 2006-02-22 No fix listed CWE-79