Merak Mail Server, Inc.

Short Name: Merak
Previous Names: [None Entered]
URL: http://www.merakmailserver.com/ [visit link]
Email: [None Entered]
Security URL: [None Entered]
Security Email: [None Entered]
Knowledge Base: http://www.merakmailserver.com/Knowledgebase/ [visit link]
Notes: [No Notes]

Vulnerabilities by Vendor Product

Merak Mail Server, Inc.

Merak Mail Server, Inc.
Merak Mail Server Watch-list
5.2.7
OSVDB ID: 9037 IceWarp WebMail address.html Multiple Parameter XSS
OSVDB ID: 9038 IceWarp WebMail settings.html Multiple Parameter XSS
OSVDB ID: 9039 IceWarp WebMail readmail.html folder Parameter XSS
OSVDB ID: 9040 IceWarp WebMail attachment.html attachmentpage_text_error Parameter XSS
OSVDB ID: 9041 IceWarp WebMail calendar.html Multiple Parameter XSS
OSVDB ID: 9042 IceWarp WebMail HTML Message Body XSS
OSVDB ID: 9043 IceWarp WebMail address.html Path Disclosure
OSVDB ID: 9045 IceWarp WebMail PHP Source Disclosure
OSVDB ID: 15062 IceWarp WebMail calendar.html Path Disclosure
OSVDB ID: 9044 IceWarp WebMail calendar.html schedule Parameter SQL Injection
7.6.0
OSVDB ID: 13368 IceWarp WebMail login.html username Parameter XSS
OSVDB ID: 13369 IceWarp WebMail accountsettings_add.html accountid Parameter XSS
OSVDB ID: 13370 IceWarp WebMail calendar_addnote.html Title Parameter XSS
OSVDB ID: 13371 IceWarp WebMail calendar_addtask.html Note Parameter XSS
OSVDB ID: 13372 IceWarp WebMail calendar_addevent.html Multiple Parameter XSS
OSVDB ID: 13373 IceWarp WebMail calendar_d.html id Variable Path Disclosure
OSVDB ID: 13374 IceWarp WebMail calendar_m.html id Variable Path Disclosure
OSVDB ID: 13375 IceWarp WebMail calendar_w.html id Variable Path Disclosure
OSVDB ID: 13376 IceWarp WebMail calendar_y.html id Variable Path Disclosure
OSVDB ID: 13377 IceWarp WebMail importaction.html Arbitrary File Manipulation
7.6.4r
OSVDB ID: 13373 IceWarp WebMail calendar_d.html id Variable Path Disclosure
OSVDB ID: 13374 IceWarp WebMail calendar_m.html id Variable Path Disclosure
OSVDB ID: 13375 IceWarp WebMail calendar_w.html id Variable Path Disclosure
OSVDB ID: 13376 IceWarp WebMail calendar_y.html id Variable Path Disclosure
OSVDB ID: 13377 IceWarp WebMail importaction.html Arbitrary File Manipulation
8.3.0.r
OSVDB ID: 22082 IceWarp WebMail /mail/include.html Crafted HTTP_USER_AGENT Arbitrary File Access
OSVDB ID: 22081 IceWarp WebMail /mail/index.html lang_settings Parameter Remote File Inclusion
OSVDB ID: 22080 IceWarp WebMail /mail/settings.html Language Parameter Local File Inclusion
OSVDB ID: 22079 IceWarp WebMail /dir/include.html lang Parameter Local File Inclusion
OSVDB ID: 22078 IceWarp WebMail /admin/inc/include.php Multiple Parameter Remote File Inclusion
OSVDB ID: 22077 IceWarp WebMail /accounts/inc/include.php Multiple Parameter Remote File Inclusion
IceWarp Web Mail Watch-list
5.2.7
OSVDB ID: 9805 IceWarp WebMail accountsettings.html User Name Parameter XSS
OSVDB ID: 9806 IceWarp WebMail search.html Search String Parameter XSS
OSVDB ID: 9807 IceWarp WebMail viewaction.html Arbitrary Direction Creation
OSVDB ID: 9808 IceWarp WebMail accountsettings_add.html Path Disclosure
OSVDB ID: 9809 IceWarp WebMail topmenu.html Path Disclosure
OSVDB ID: 9811 IceWarp WebMail accountsettings_add.html Arbitrary File Creation
OSVDB ID: 9812 IceWarp WebMail viewaction.html Arbitrary File Deletion
OSVDB ID: 9813 IceWarp WebMail viewaction.html Arbitrary File/Directory Move
OSVDB ID: 9814 IceWarp WebMail folders.html Arbitrary File/Directory Rename
OSVDB ID: 9810 IceWarp WebMail attachment.html Arbitrary E-mail Attachment Access
5.2.8
OSVDB ID: 9811 IceWarp WebMail accountsettings_add.html Arbitrary File Creation
5.3.0
OSVDB ID: 13368 IceWarp WebMail login.html username Parameter XSS
OSVDB ID: 13369 IceWarp WebMail accountsettings_add.html accountid Parameter XSS
OSVDB ID: 13370 IceWarp WebMail calendar_addnote.html Title Parameter XSS
OSVDB ID: 13371 IceWarp WebMail calendar_addtask.html Note Parameter XSS
OSVDB ID: 13372 IceWarp WebMail calendar_addevent.html Multiple Parameter XSS
OSVDB ID: 13373 IceWarp WebMail calendar_d.html id Variable Path Disclosure
OSVDB ID: 13374 IceWarp WebMail calendar_m.html id Variable Path Disclosure
OSVDB ID: 13375 IceWarp WebMail calendar_w.html id Variable Path Disclosure
OSVDB ID: 13376 IceWarp WebMail calendar_y.html id Variable Path Disclosure
OSVDB ID: 13377 IceWarp WebMail importaction.html Arbitrary File Manipulation
5.3.2
OSVDB ID: 13373 IceWarp WebMail calendar_d.html id Variable Path Disclosure
OSVDB ID: 13374 IceWarp WebMail calendar_m.html id Variable Path Disclosure
OSVDB ID: 13375 IceWarp WebMail calendar_w.html id Variable Path Disclosure
OSVDB ID: 13376 IceWarp WebMail calendar_y.html id Variable Path Disclosure
OSVDB ID: 13377 IceWarp WebMail importaction.html Arbitrary File Manipulation



The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.

© Copyright 2002 - 2013 Open Source Vulnerability Database (OSVDB), All Rights Reserved.
Privacy Statement - Terms of Use