VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 10, 2004· Updated Apr 16, 2026

CVE-2004-1669

CVE-2004-1669

Description

Cross-site scripting (XSS) vulnerability in MERAK Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to execute arbitrary web script or HTML via the (1) User name parameter to accountsettings.html or (2) Search string parameter to search.html.

Affected products

4
  • IceWarp/Web Mail3 versions
    cpe:2.3:a:icewarp:web_mail:3.3.2:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:icewarp:web_mail:3.3.2:*:*:*:*:*:*:*
    • cpe:2.3:a:icewarp:web_mail:5.2.7:*:*:*:*:*:*:*
    • cpe:2.3:a:icewarp:web_mail:5.2.8:*:*:*:*:*:*:*
  • Merak/Mail Server
    cpe:2.3:a:merak:mail_server:7.4.5:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

News mentions

0

No linked articles in our index yet.