Filtered by vendor Netwin Subscriptions
Filtered by product Webmail Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2008-1055 1 Netwin 2 Surgemail, Webmail 2024-11-21 N/A
Format string vulnerability in webmail.exe in NetWin SurgeMail 38k4 and earlier and beta 39a, and WebMail 3.1s and earlier, allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via format string specifiers in the page parameter.
CVE-2007-2655 1 Netwin 2 Surgemail, Webmail 2024-11-21 N/A
Unspecified vulnerability in NetWin Webmail 3.1s-1 in SurgeMail before 3.8i2 has unknown impact and remote attack vectors, possibly a format string vulnerability that allows remote code execution.
CVE-2004-2548 1 Netwin 2 Surgemail, Webmail 2024-11-20 N/A
Multiple cross-site scripting (XSS) vulnerabilities in NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to inject arbitrary web script or HTML via (a) a URI containing the script, or (b) the username field in the login form. NOTE: it is possible that the first attack vector is resultant from the error message issue (CVE-2004-2547).
CVE-2004-2547 1 Netwin 2 Surgemail, Webmail 2024-11-20 N/A
NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to obtain sensitive information via HTTP requests that (a) specify the / URI, (b) specify the /scripts/ URI, or (c) specify a non-existent file, which reveal the path in an error message.