Skip to content
Noroxi

open webmail records

13 published records for vendor open webmail.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
15.4%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    13 records
    • CVE-2004-2284
      41Plan

      The read_list_from_file function in vacation.pl for OpenWebmail before 2.32 20040629 allows remote attackers to execute arbitrary commands v

      CriticalCVSS 10.0No exploitEPSS 3%

      open webmail · open webmailDec 31, 2004

    • CVE-2005-1435
      31Monitor

      Open WebMail (OWM) before 2.51 20050430 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a filena

      HighCVSS 7.5No exploitEPSS 2%

      open webmail · open webmailMay 3, 2005

    • CVE-2004-0520
      29Monitor

      Cross-site scripting (XSS) vulnerability in mime.php for SquirrelMail before 1.4.3 allows remote attackers to insert arbitrary HTML and scri

      MediumCVSS 6.8Proof of conceptEPSS 7%

      squirrelmail · squirrelmailAug 18, 2004

    • CVE-2004-0639
      29Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in Squirrelmail 1.2.10 and earlier allow remote attackers to inject arbitrary HTML or sc

      MediumCVSS 6.8Proof of conceptEPSS 5%

      squirrelmail · squirrelmailAug 6, 2004

    • CVE-2002-1385
      28Monitor

      openwebmail_init in Open WebMail 1.81 and earlier allows local users to execute arbitrary code via ..

      HighCVSS 7.2No exploitEPSS 0%

      open webmail · open webmailDec 26, 2002

    • CVE-2006-2190
      27Monitor

      Cross-site scripting (XSS) vulnerability in ow-shared.pl in OpenWebMail (OWM) 2.51 and earlier allows remote attackers to inject arbitrary w

      MediumCVSS 6.8No exploitEPSS 1%

      open webmail · open webmailMay 4, 2006

    • CVE-2004-2458
      20Monitor

      Open WebMail 2.30 and earlier, when use_syshomedir is disabled or create_syshomedir is enabled, creates new directories before authenticatin

      MediumCVSS 5.0No exploitEPSS 1%

      open webmail · open webmailDec 31, 2004

    • CVE-2002-2410
      20Monitor

      openwebmail.pl in Open WebMail 1.7 and 1.71 reveals sensitive information in error messages and generates different responses whether a user

      MediumCVSS 5.0No exploitEPSS 1%

      open webmail · open webmailDec 31, 2002

    • CVE-2006-3233
      17Monitor

      Cross-site scripting (XSS) vulnerability in openwebmail-read.pl in Open WebMail (OWM) 2.52, and other versions released before 06/18/2006, a

      MediumCVSS 4.3No exploitEPSS 1%

      open webmail · open webmailJun 27, 2006

    • CVE-2005-0445
      17Monitor

      Cross-site scripting (XSS) vulnerability in Open WebMail 2.x allows remote attackers to inject arbitrary HTML or web script via the domain n

      MediumCVSS 4.3No exploitEPSS 1%

      open webmail · open webmailMay 2, 2005

    • CVE-2006-3229
      17Monitor

      Cross-site scripting (XSS) vulnerability in Open WebMail (OWM) 2.52, and other versions released before 05/12/2006, allows remote attackers

      MediumCVSS 4.3No exploitEPSS 1%

      open webmail · open webmailJun 26, 2006

    • CVE-2005-2863
      17Monitor

      Cross-site scripting (XSS) vulnerability in openwebmail-main.pl in OpenWebMail 2.41 allows remote attackers to inject arbitrary web script o

      MediumCVSS 4.3No exploitEPSS 1%

      open webmail · open webmailSep 8, 2005

    • CVE-2007-4172
      17Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in Open Webmail (OWM) 2.52 20060831 and earlier allow remote attackers to inject arbitra

      MediumCVSS 4.3No exploitEPSS 1%

      open webmail · open webmailAug 7, 2007