VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Feb 15, 2007· Updated Apr 23, 2026

CVE-2007-0953

CVE-2007-0953

Description

Cross-site scripting (XSS) vulnerability in search.pl in @Mail 4.61 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.

Affected products

9
  • Atmail/Webmail9 versions
    cpe:2.3:a:atmail:atmail_webmail:4.11:*:freebsd:*:*:*:*:*+ 8 more
    • cpe:2.3:a:atmail:atmail_webmail:4.11:*:freebsd:*:*:*:*:*
    • cpe:2.3:a:atmail:atmail_webmail:4.11:*:hp-ux:*:*:*:*:*
    • cpe:2.3:a:atmail:atmail_webmail:4.11:*:linux:*:*:*:*:*
    • cpe:2.3:a:atmail:atmail_webmail:4.11:*:mac_os_x:*:*:*:*:*
    • cpe:2.3:a:atmail:atmail_webmail:4.11:*:solaris:*:*:*:*:*
    • cpe:2.3:a:atmail:atmail_webmail:4.3:*:windows:*:*:*:*:*
    • cpe:2.3:a:atmail:atmail_webmail:4.51:*:*:*:*:*:*:*
    • cpe:2.3:a:atmail:atmail_webmail:4.6:*:*:*:*:*:*:*
    • cpe:2.3:a:atmail:atmail_webmail:4.61:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

7

News mentions

0

No linked articles in our index yet.