Unrated severityNVD Advisory· Published Dec 31, 2004· Updated Apr 16, 2026

CVE-2004-2379

Description

Multiple cross-site scripting (XSS) vulnerabilities in @Mail 3.64 for Windows allow remote attackers to inject arbitrary web script or HTML via (1) the Displayed Name attribute in util.pl and (2) the Folder attribute in showmail.pl.

Affected products

Calacode/Atmail Webmail System
cpe:2.3:a:calacode:at_mail_webmail_system:3.64:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.securitytracker.com/alerts/2004/Feb/1009208.htmlnvdExploit
members.lycos.co.uk/r34ct/main/%40mail_3.64/%40mail_3.64.txtnvd
secunia.com/advisories/10978nvd
www.osvdb.org/4066nvd
www.osvdb.org/4067nvd
www.securityfocus.com/bid/9748nvd
exchange.xforce.ibmcloud.com/vulnerabilities/15324nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000