Approved changes feed: RSS · Atom

cpe:2.3:a:icewarp:web_mail:5.3.2:*:*:*:*:*:*:*

part: a version: 5.3.2 update: *

VendorIcewarp (c8030f23-957a-58b4-8b02-23bd6cb49d34)
ProductWeb Mail (a1dcdb0e-ad47-5962-8186-7d253c8523d1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-2484 vulnerable 2026-06-03 14:27:32.382938 Details available
Cross-site scripting (XSS) vulnerability in index.html in IceWarp WebMail 5.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter.
Published: 2006-05-19T23:00:00.000Z
Updated: 2024-08-07T17:51:04.549Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0322 vulnerable 2026-06-03 14:26:50.055606 Details available
MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 and Mail Server 7.6.4r with Icewarp Mail Server 5.3.2 uses weak encryption in the (1) users.cfg, (2) settings.cfg, (3) users.dat or (4) user.dat files, which allows local users to extract the passwords.
Published: 2005-02-10T05:00:00.000Z
Updated: 2024-08-07T21:05:25.639Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.