HOMEVULNERABILITIESVENDORSInstant Web Mail

Instant Web MailCVEs & Vulnerabilities

1 CVEs affecting Instant Web Mail products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

instant web mail 5
CVE-2002-0490CRITICAL

Instant Web Mail before 0.60 does not properly filter CR/LF sequences, which allows remote attackers to (1) execute arbitrary POP commands via the id parameter in message.php, or (2) modify certain mail message headers via numerous parameters in write.php.

12 Aug 2002
10.0
CVSS
← PrevPage 1 / 1Next →
← All Vendors·CVE Database