VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 15, 2007· Updated Jun 16, 2026

CVE-2007-0953

CVE-2007-0953

Description

Cross-site scripting (XSS) vulnerability in search.pl in @Mail 4.61 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10
  • Atmail/Webmail9 versions
    cpe:2.3:a:atmail:atmail_webmail:4.11:*:freebsd:*:*:*:*:*+ 8 more
    • cpe:2.3:a:atmail:atmail_webmail:4.11:*:freebsd:*:*:*:*:*
    • cpe:2.3:a:atmail:atmail_webmail:4.11:*:hp-ux:*:*:*:*:*
    • cpe:2.3:a:atmail:atmail_webmail:4.11:*:linux:*:*:*:*:*
    • cpe:2.3:a:atmail:atmail_webmail:4.11:*:mac_os_x:*:*:*:*:*
    • cpe:2.3:a:atmail:atmail_webmail:4.11:*:solaris:*:*:*:*:*
    • cpe:2.3:a:atmail:atmail_webmail:4.3:*:windows:*:*:*:*:*
    • cpe:2.3:a:atmail:atmail_webmail:4.51:*:*:*:*:*:*:*
    • cpe:2.3:a:atmail:atmail_webmail:4.6:*:*:*:*:*:*:*
    • cpe:2.3:a:atmail:atmail_webmail:4.61:*:*:*:*:*:*:*
  • Mail/Mailllm-fuzzy
    Range: <=4.61

Patches

Vulnerability mechanics

References

7

News mentions

0

No linked articles in our index yet.