Unrated severityNVD Advisory· Published Oct 4, 2005· Updated Apr 16, 2026
CVE-2005-3131
CVE-2005-3131
Description
Multiple cross-site scripting (XSS) vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to blank.html, or the createdataCX parameter to (2) calendar_d.html, (3) calendar_m.html, or (4) calendar_w.html.
Affected products
2- cpe:2.3:a:merak:mail_server:8.2.4r:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- secunia.com/advisories/17046/nvdExploitVendor Advisory
- www.securityfocus.com/bid/14980nvdExploit
- marc.infonvd
- www.vupen.com/english/advisories/2005/1933nvd
News mentions
0No linked articles in our index yet.