CVE-2005-3811
Published Nov 25, 2005Directory traversal vulnerability in admin/main.php in AMAX Magic Winmail Server 4.2 (build 0824) and earlier allows remote attackers to overwrite arbitrary files with session inf…
Vendor/product archive
amax_information_technologies / magic_winmail_server CVEs
Beta · best-effort7 CVEs tagged to amax_information_technologies / magic_winmail_server — 0 Critical, 2 High, 5 Medium, 0 Low, 0 Unrated.
CVE-2005-3692
Published Nov 19, 2005Cross-site scripting (XSS) vulnerability in AMAX Magic Winmail Server 4.2 (build 0824) and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) retid…
CVE-2005-0313
Published Jan 27, 2005Multiple directory traversal vulnerabilities in Magic Winmail Server 4.0 Build 1112 allow remote attackers to (1) upload arbitrary files via certain parameters to upload.php or (2…
CVE-2005-0314
Published Jan 27, 2005Cross-site scripting (XSS) vulnerability in user.php in Magic Winmail Server 4.0 Build 1112 allows remote attackers to inject arbitrary web script or HTML via the personal informa…
CVE-2005-0315
Published Jan 27, 2005The FTP service in Magic Winmail Server 4.0 Build 1112 does not verify that the IP address in a PORT command is the same as the IP address of the user of the FTP session, which al…
CVE-2004-2572
Published Dec 31, 2004AMAX Magic Winmail Server 3.6 allows remote attackers to obtain sensitive information by entering (1) invalid characters such as "()" or (2) a large number of characters in the Lo…
CVE-2003-0391
Published Jul 2, 2003Format string vulnerability in Magic WinMail Server 2.3, and possibly other 2.x versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitra…
Showing 1-7 of 7 CVEsPage 1 of 1