{"id":"CVE-2005-2183","aliases":["EUVD-2005-2184","GHSA-3965-7vwp-wr38"],"status":"published","title":"class.xmail.php in PhpXmail 0.7 through 1.1 does not properly handle large passwords, which...","description":"class.xmail.php in PhpXmail 0.7 through 1.1 does not properly handle large passwords, which prevents an error message from being returned and allows remote attackers to bypass authentication and gain unauthorized access.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01407,"percentile":0.72785,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2005-07-10T04:00:00Z","modified":"2026-06-16T22:14:25Z","products":[{"vendor":"phpxmail","product":"phpxmail"}],"references":[{"url":"http://marc.info/?l=bugtraq\u0026m=112067694016410\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://secunia.com/advisories/15951","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-2183"},{"url":"https://github.com/advisories/GHSA-3965-7vwp-wr38"}],"sources":{"cve":[{"id":"CVE-2005-2183","description":"class.xmail.php in PhpXmail 0.7 through 1.1 does not properly handle large passwords, which prevents an error message from being returned and allows remote attackers to bypass authentication and gain unauthorized access.","status":"published","published":"2005-07-10T04:00:00Z","modified":"2024-08-07T22:15:37.685Z","updated_at":"2026-11-02T14:33:37.446553Z"}],"euvd":[{"id":"EUVD-2005-2184","description":"class.xmail.php in PhpXmail 0.7 through 1.1 does not properly handle large passwords, which prevents an error message from being returned and allows remote attackers to bypass authentication and gain unauthorized access.","status":"published","published":"2005-07-10T04:00:00Z","modified":"2024-08-07T22:15:37Z","updated_at":"2026-11-03T01:15:31.903004Z"}],"ghsa":[{"id":"GHSA-3965-7vwp-wr38","title":"class.xmail.php in PhpXmail 0.7 through 1.1 does not properly handle large passwords, which...","description":"class.xmail.php in PhpXmail 0.7 through 1.1 does not properly handle large passwords, which prevents an error message from being returned and allows remote attackers to bypass authentication and gain unauthorized access.","status":"published","published":"2022-05-01T02:05:40Z","modified":"2023-01-30T05:06:59Z","updated_at":"2026-11-02T14:47:36.345061Z"}],"nvd":[{"id":"CVE-2005-2183","description":"class.xmail.php in PhpXmail 0.7 through 1.1 does not properly handle large passwords, which prevents an error message from being returned and allows remote attackers to bypass authentication and gain unauthorized access.","status":"published","published":"2005-07-11T04:00:00Z","modified":"2026-06-16T22:14:25.347Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:55.600202Z"}]}}