Unrated severityNVD Advisory· Published Dec 31, 2004· Updated Jun 16, 2026

CVE-2004-2379

Description

Multiple cross-site scripting (XSS) vulnerabilities in @Mail 3.64 for Windows allow remote attackers to inject arbitrary web script or HTML via (1) the Displayed Name attribute in util.pl and (2) the Folder attribute in showmail.pl.

Affected products

Atmail/Atmail Webmail System
cpe:2.3:a:calacode:at_mail_webmail_system:3.64:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

www.securitytracker.com/alerts/2004/Feb/1009208.htmlnvdExploit
members.lycos.co.uk/r34ct/main/%40mail_3.64/%40mail_3.64.txtnvd
secunia.com/advisories/10978nvd
www.osvdb.org/4066nvd
www.osvdb.org/4067nvd
www.securityfocus.com/bid/9748nvd
exchange.xforce.ibmcloud.com/vulnerabilities/15324nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000