Cross-Site Scripting Vulnerabilities in MERAK Mail Server by Icewarp
CVE-2005-0320

Currently unrated

Key Information:

Vendor: Icewarp
Status: Web Mail
Vendor: CVE Published:; 28 January 2005

What is CVE-2005-0320?

Multiple cross-site scripting vulnerabilities exist in MERAK Mail Server version 7.6.0 and Icewarp Web Mail version 5.3.0. These vulnerabilities allow attackers to inject arbitrary web scripts or HTML by manipulating specific fields: the username parameter in login.html, the accountid parameter in accountsettings_add.html, and the note, title, and location fields in calendar.html. This can lead to unauthorized actions performed in the context of the user's session, risking sensitive information and compromising user accounts.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch