Approved changes feed: RSS · Atom

cpe:2.3:a:icewarp:merak_mail_server:8.9.1:*:*:*:*:*:*:*

part: a version: 8.9.1 update: *

VendorIcewarp (c8030f23-957a-58b4-8b02-23bd6cb49d34)
ProductMerak Mail Server (5a0f7381-69ed-5796-8bb9-56954f9fd006)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-5046 vulnerable 2026-06-03 14:28:19.970583 Details available
Cross-site scripting (XSS) vulnerability in the Webmail interface for IceWarp Merak Mail Server before 9.0.0 allows remote attackers to inject arbitrary JavaScript via a javascript: URI in an attribute of an element in an email message body, as demonstrated by the onload attribute in a BODY element.
Published: 2007-09-24T00:00:00.000Z
Updated: 2024-08-07T15:17:28.101Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.