Cross-Site Scripting Vulnerabilities in MERAK Mail Server by Icewarp

CVE-2005-0320

What is CVE-2005-0320?

Multiple cross-site scripting vulnerabilities exist in MERAK Mail Server version 7.6.0 and Icewarp Web Mail version 5.3.0. These vulnerabilities allow attackers to inject arbitrary web scripts or HTML by manipulating specific fields: the username parameter in login.html, the accountid parameter in accountsettings_add.html, and the note, title, and location fields in calendar.html. This can lead to unauthorized actions performed in the context of the user's session, risking sensitive information and compromising user accounts.

References