Skip to content
Noroxi

IceWarp records

70 published records for vendor icewarp.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
6
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

70 records
  • CVE-2015-1503
    47Plan

    Multiple directory traversal vulnerabilities in IceWarp Mail Server before 11.2 allow remote attackers to read arbitrary files via a (1) ..

    HighCVSS 7.5Proof of conceptEPSS 57%

    icewarp · mail serverMay 8, 2018

  • CVE-2019-12593
    42Plan

    IceWarp Mail Server through 10.4.4 is prone to a local file inclusion vulnerability via webmail/calendar/minimizer/index.php?style=..%5c dir

    HighCVSS 7.5Proof of conceptEPSS 40%

    icewarp · mail serverJun 3, 2019

  • CVE-2023-39699
    39Monitor

    IceWarp Mail Server v10.4.5 was discovered to contain a local file inclusion (LFI) vulnerability via the component /calendar/minimizer/index

    CriticalCVSS 9.8No exploitEPSS 1%

    icewarp · mail serverAug 24, 2023

  • CVE-2022-35115
    39Monitor

    IceWarp WebClient DC2 - Update 2 Build 9 (13.0.2.9) was discovered to contain a SQL injection vulnerability via the search parameter at /web

    CriticalCVSS 9.8No exploitEPSS 0%

    icewarp · webclient dc2Aug 23, 2022

  • CVE-2020-14066
    36Monitor

    IceWarp Email Server 12.3.0.1 allows remote attackers to upload JavaScript files that are dangerous for clients to access.

    HighCVSS 8.8Proof of conceptEPSS 1%

    icewarp · mail serverJul 15, 2020

  • CVE-2005-4556
    33Monitor

    PHP remote file include vulnerability in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0

    HighCVSS 7.5Proof of conceptEPSS 10%

    icewarp · web mailDec 28, 2005

  • CVE-2009-1516
    31Monitor

    Stack-based buffer overflow in the IceWarpServer.APIObject ActiveX control in api.dll in IceWarp Merak Mail Server 9.4.1 might allow context

    HighCVSS 7.5Proof of conceptEPSS 3%

    icewarp · merak mail serverMay 4, 2009

  • CVE-2010-5335
    31Monitor

    IceWarp Webclient before 10.2.1 has a directory traversal vulnerability.

    HighCVSS 7.5No exploitEPSS 2%

    icewarp · webclientOct 11, 2019

  • CVE-2010-5334
    31Monitor

    IceWarp Webclient before 10.2.1 has a directory traversal vulnerability.

    HighCVSS 7.5No exploitEPSS 2%

    icewarp · webclientOct 11, 2019

  • CVE-2004-1670
    31Monitor

    Multiple directory traversal vulnerabilities Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7, and possibly other versions, allow remote

    HighCVSS 7.5No exploitEPSS 1%

    icewarp · web mailSep 10, 2004

  • CVE-2004-1673
    31Monitor

    accountsettings_add.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allow remote attackers to create

    HighCVSS 7.5No exploitEPSS 1%

    icewarp · web mailOct 12, 2004

  • CVE-2004-1672
    31Monitor

    attachment.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to view other use

    HighCVSS 7.5No exploitEPSS 1%

    icewarp · web mailOct 12, 2004

  • CVE-2004-1674
    30Monitor

    viewaction.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to (1) delete arb

    HighCVSS 7.5No exploitEPSS 1%

    icewarp · web mailOct 12, 2004

  • CVE-2002-0258
    30Monitor

    Merak Mail IceWarp Web Mail uses a static identifier as a user session ID that does not change across sessions, which could allow remote att

    HighCVSS 7.5No exploitEPSS 1%

    icewarp · web mailMay 29, 2002

  • CVE-2005-4558
    29Monitor

    IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not properly restrict accep

    MediumCVSS 6.5Proof of conceptEPSS 8%

    icewarp · web mailDec 28, 2005

  • CVE-2020-8512
    28Monitor

    In IceWarp Webmail Server through 11.4.4.1, there is XSS in the /webmail/ color parameter.

    MediumCVSS 6.1Proof of conceptEPSS 14%

    icewarp · icewarp serverJan 31, 2020

  • CVE-2005-0322
    28Monitor

    MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 and Mail Server 7.6.4r with Icewarp Mail Server 5.3.2 uses weak encryption in the (1) us

    HighCVSS 7.2No exploitEPSS 0%

    icewarp · web mailMay 2, 2005

  • CVE-2009-1468
    27Monitor

    Multiple SQL injection vulnerabilities in the search form in server/webmail.php in the Groupware component in IceWarp eMail Server and WebMa

    MediumCVSS 6.5Proof of conceptEPSS 1%

    icewarp · email serverMay 5, 2009

  • CVE-2020-27982
    26Monitor

    IceWarp 11.4.5.0 allows XSS via the language parameter.

    MediumCVSS 6.1Proof of conceptEPSS 5%

    icewarp · mail serverNov 2, 2020

  • CVE-2011-3579
    26Monitor

    server/webmail.php in IceWarp WebMail in IceWarp Mail Server before 10.3.3 allows remote attackers to read arbitrary files, and possibly sen

    MediumCVSS 6.4Proof of conceptEPSS 4%

    icewarp · mail serverSep 30, 2011

  • CVE-2020-14065
    26Monitor

    IceWarp Email Server 12.3.0.1 allows remote attackers to upload files and consume disk space.

    MediumCVSS 6.5Proof of conceptEPSS 1%

    icewarp · mail serverJul 15, 2020

  • CVE-2020-14064
    26Monitor

    IceWarp Email Server 12.3.0.1 has Incorrect Access Control for user accounts.

    MediumCVSS 6.5Proof of conceptEPSS 0%

    icewarp · mail serverJul 15, 2020

  • CVE-2017-7855
    25Monitor

    In the webmail component in IceWarp Server 11.3.1.5, there was an XSS vulnerability discovered in the "language" parameter.

    MediumCVSS 6.1Proof of conceptEPSS 2%

    icewarp · serverAug 31, 2017

  • CVE-2021-36580
    24Monitor

    Open Redirect vulnerability exists in IceWarp MailServer IceWarp Server Deep Castle 2 Update 1 (13.0.1.2) via the referer parameter.

    MediumCVSS 6.1Proof of conceptEPSS 1%

    icewarp · icewarp serverJul 27, 2023

  • CVE-2023-39700
    24Monitor

    IceWarp Mail Server v10.4.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the color parameter.

    MediumCVSS 6.1Proof of conceptEPSS 1%

    icewarp · mail serverAug 24, 2023