Atmail: Security Vulnerabilities
Cross-site scripting (XSS) vulnerability in the Webadmin in @Mail before 4.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "unescaped data in the database."
CVSS Score
6.8
EPSS Score
0.011
Published
2006-12-23
Directory traversal vulnerability in compose.pl in @Mail 4.3 and earlier for Windows allows remote attackers to upload arbitrary files to arbitrary locations via a .. (dot dot) in the unique parameter.
CVSS Score
7.5
EPSS Score
0.018
Published
2006-02-09
Page 4