GCVE - cpe:2.3:a:mailwasher:mailwasher

Approved changes feed: RSS · Atom

cpe:2.3:a:mailwasher:mailwasher_server:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Mailwasher (`60300405-96f5-5d91-9695-be3424728f8b`)
Product	Mailwasher Server (`c752cb1f-6ece-5d95-93db-bb83da28230f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-3275`	vulnerable	2026-06-08 04:49:53.558684	Details available MailWasher Server before 2.2.1, when used with LDAP or Active Directory (AD), does not properly handle blank passwords, which allows remote attackers to access an arbitrary user account and read the spam e-mail messages stored for that account, possibly related to the LoginCheck::doPost function in mwi/servlet/Login.cpp. NOTE: some of these details are obtained from third party information. Published: 2007-06-19T21:00:00.000Z Updated: 2024-08-07T14:14:12.426Z Open on db.gcve.eu Reference links http://secunia.com/advisories/25695 http://osvdb.org/37538 http://www.vupen.com/english/advisories/2007/2239 https://exchange.xforce.ibmcloud.com/vulnerabilities/34925 http://www.securityfocus.com/bid/24507	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.