VYPR

Webmail

by EMU

CVEs (2)

  • CVE-2004-2334Dec 31, 2004
    risk 0.03cvss epss 0.05

    Multiple cross-site scripting (XSS) vulnerabilities in EMU Webmail 5.2.7 allow remote attackers to inject arbitrary web script or HTML via (1) a hex-encoded value to the variable parameter in emumail.fcgi, (2) the folder parameter in emumail.fcgi, or Javascript in the (3)…

  • CVE-2002-0532Aug 12, 2002
    risk 0.00cvss epss 0.00

    EMU Webmail allows local users to execute arbitrary programs via a .. (dot dot) in the HTTP Host header that points to a Trojan horse configuration file that contains a pageroot specifier that contains shell metacharacters.