Filtered by vendor Merak Subscriptions
Filtered by product Mail Server Subscriptions
Total 23 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2005-1491 2 Icewarp, Merak 2 Web Mail, Mail Server 2025-04-03 N/A
Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allows remote authenticated users to (1) move their home directory via viewaction.html or (2) move arbitrary files via the importfile parameter to importaction.html.
CVE-2005-3132 2 Icewarp, Merak 2 Web Mail, Mail Server 2025-04-03 N/A
MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to bwlist_inc.html, which reveals the path in an error message.
CVE-2005-3133 2 Icewarp, Merak 2 Web Mail, Mail Server 2025-04-03 N/A
Multiple directory traversal vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allows remote attackers to (1) delete arbitrary files or directories via a relative path to the id parameter to logout.html or (2) include arbitrary PHP files or other files via the helpid parameter to help.html.