Skip to content
Noroxi

calacode records

7 published records for vendor calacode.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    7 records
    • CVE-2008-3579
      32Monitor

      Calacode @Mail 5.41 on Linux does not require administrative authentication for build-plesk-upgrade.php, which allows remote attackers to ob

      HighCVSS 7.8No exploitEPSS 2%

      linux · linux kernelAug 10, 2008

    • CVE-2006-6700
      27Monitor

      Cross-site scripting (XSS) vulnerability in @Mail WebMail allows remote attackers to inject arbitrary web script or HTML via unspecified vec

      MediumCVSS 6.8No exploitEPSS 1%

      calacode · atmail webmail systemDec 22, 2006

    • CVE-2004-2378
      21Monitor

      @Mail 3.64 for Windows allows remote attackers to cause a denial of service ("unusable" server) via a large number of POP3 connections to th

      MediumCVSS 5.0No exploitEPSS 2%

      calacode · at mail webmail systemDec 31, 2004

    • CVE-2008-3395
      20Monitor

      Calacode @Mail 5.41 on Linux uses weak world-readable permissions for (1) webmail/libs/Atmail/Config.php and (2) webmail/webadmin/.htpasswd,

      MediumCVSS 5.0No exploitEPSS 1%

      linux · linux kernelJul 31, 2008

    • CVE-2006-0842
      18Monitor

      Cross-site scripting (XSS) vulnerability in Calacode @Mail 4.3 allows remote attackers to inject arbitrary web script or HTML via a modified

      MediumCVSS 4.3No exploitEPSS 2%

      calacode · atmail webmail systemFeb 21, 2006

    • CVE-2004-2379
      17Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in @Mail 3.64 for Windows allow remote attackers to inject arbitrary web script or HTML

      MediumCVSS 4.3No exploitEPSS 1%

      calacode · at mail webmail systemDec 31, 2004

    • CVE-2007-6196
      17Monitor

      Cross-site scripting (XSS) vulnerability in util.php in Calacode @Mail before 5.2 allows remote attackers to inject arbitrary web script or

      MediumCVSS 4.3No exploitEPSS 1%

      calacode · atmail webmail systemDec 1, 2007