Icewarp vulnerabilities

Products

• Web Mail 25
• Mail Server 19
• Webclient 10
• Icewarp 9
• Email Server 3
• Mail Server 3
• Merak Mail Server 3
• Webmail Server 3
• Server 2

Newest

• icewarp, icewarp client +1 more ICEWARP 11.0.0.0 Cross-Site Scripting via Email HTML Injection CVE-2018-25269 5.1 MediumApril 22, 2026
• icewarp IceWarp collaboration Directory Traversal Information Disclosure Vulnerability CVE-2026-2493 7.5 HighMarch 13, 2026
• icewarp IceWarp14 X-File-Operation Command Injection Remote Code Execution Vulnerability CVE-2025-14500 9.8 CriticalDecember 23, 2025
• icewarp IceWarp gmaps Cross-Site Scripting Authentication Bypass Vulnerability CVE-2025-14499 8.8 HighDecember 23, 2025
• icewarp mail server Cross-site scripting (XSS) vulnerability in IceWarp Mail Server CVE-2025-40632 2.0 LowMay 16, 2025
• icewarp mail server HTTP host header injection vulnerability in IceWarp Mail Server CVE-2025-40631 2.0 LowMay 16, 2025
• icewarp mail server Open redirection vulnerability in IceWarp Mail Server CVE-2025-40630 5.1 MediumMay 16, 2025
• icewarp IceWarp Server 10.2.1 is vulnerable to Cross Site Scripting (XSS) via the meta parameter. CVE-2024-55218 6.1 MediumJanuary 7, 2025
• icewarp IceWarp Utility Download cross site scripting CVE-2024-0246 4.3 MediumJanuary 5, 2024
• icewarp webclient Cross Site Scripting (XSS) vulnerability in the Sign-In page of IceWarp WebClient 10.3.5 allows... CVE-2023-43319 6.1 MediumSeptember 25, 2023
• icewarp deep castle g2 An issue in IceWarp Mail Server Deep Castle 2 v.13.0.1.2 allows a remote attacker to execute... CVE-2023-40779 6.1 MediumSeptember 14, 2023
• icewarp Cross Site Scripting (XSS) in Webmail Calendar in IceWarp 10.3.1 allows remote attackers to... CVE-2023-41013 6.1 MediumSeptember 12, 2023
• icewarp webclient Cross Site Scripting vulnerability in IceWarp Corporation WebClient v.10.2.1 allows a remote... CVE-2023-39598 6.1 MediumSeptember 5, 2023
• icewarp IceWarp 11.4.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the... CVE-2023-39600 6.1 MediumAugust 25, 2023
• icewarp mail server IceWarp Mail Server v10.4.5 was discovered to contain a reflected cross-site scripting (XSS)... CVE-2023-39700 6.1 MediumAugust 24, 2023
• icewarp mail server IceWarp Mail Server v10.4.5 was discovered to contain a local file inclusion (LFI) vulnerability... CVE-2023-39699 9.8 CriticalAugust 24, 2023
• icewarp server, mail server +1 more Open Redirect vulnerability exists in IceWarp MailServer IceWarp Server Deep Castle 2 Update 1 ... CVE-2021-36580 6.1 MediumJuly 27, 2023
• icewarp Icewarp Icearp v10.2.1 was discovered to contain a cross-site scripting (XSS) vulnerability. CVE-2023-37728 6.1 MediumJuly 20, 2023
• icewarp webclient dc2 IceWarp WebClient DC2 - Update 2 Build 9 (13.0.2.9) was discovered to contain a SQL injection... CVE-2022-35115 9.8 CriticalAugust 23, 2022
• icewarp webclient Cross Site Scripting (XSS) in Webmail Calender in IceWarp WebClient 10.3.5 allows remote... CVE-2020-25925 6.1 MediumJuly 7, 2021
• icewarp mail server IceWarp 11.4.5.0 allows XSS via the language parameter. CVE-2020-27982 6.1 MediumNovember 2, 2020
• icewarp mail server IceWarp Email Server 12.3.0.1 allows remote attackers to upload JavaScript files that are... CVE-2020-14066 Public exploit 8.8 HighJuly 15, 2020
• icewarp mail server IceWarp Email Server 12.3.0.1 allows remote attackers to upload files and consume disk space. CVE-2020-14065 Public exploit 6.5 MediumJuly 15, 2020
• icewarp mail server IceWarp Email Server 12.3.0.1 has Incorrect Access Control for user accounts. CVE-2020-14064 Public exploit 6.5 MediumJuly 15, 2020
• icewarp server In IceWarp Webmail Server through 11.4.4.1, there is XSS in the /webmail/ color parameter. CVE-2020-8512 Public exploit EPSS 14.8% 6.1 MediumJanuary 31, 2020
• icewarp mail server IceWarp WebMail Server 12.2.0 and 12.1.x before 12.2.1.1 (and probably earlier versions) allows... CVE-2019-19265 6.1 MediumJanuary 6, 2020
• icewarp mail server IceWarp WebMail Server 12.2.0 and 12.1.x before 12.2.1.1 (and probably earlier versions) allows... CVE-2019-19266 5.4 MediumJanuary 6, 2020
• icewarp webclient IceWarp Webclient before 10.2.1 has a directory traversal vulnerability. This can result in loss... CVE-2010-5334 7.5 HighOctober 11, 2019
• icewarp webclient IceWarp Webclient before 10.2.1 has a directory traversal vulnerability. This can result in loss... CVE-2010-5335 7.5 HighOctober 11, 2019
• icewarp webclient IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: admin/login.html with the... CVE-2010-5336 6.1 MediumOctober 11, 2019
• icewarp webclient IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the... CVE-2010-5337 6.1 MediumOctober 11, 2019
• icewarp webclient IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the... CVE-2010-5338 6.1 MediumOctober 11, 2019
• icewarp webclient IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the... CVE-2010-5339 6.1 MediumOctober 11, 2019
• icewarp webclient IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/ with the parameter... CVE-2010-5340 6.1 MediumOctober 11, 2019
• icewarp mail server IceWarp Mail Server through 10.4.4 is prone to a local file inclusion vulnerability via webmail... CVE-2019-12593 Public exploit EPSS 41.0% 7.5 HighJune 3, 2019
• icewarp mail server In IceWarp Server 12.0.3.1 and before, there is XSS in the /webmail/ username field. CVE-2018-16324 6.1 MediumSeptember 1, 2018
• icewarp mail server Cross-site scripting (XSS) vulnerability for webdav/ticket/ URIs in IceWarp Mail Server 12.0.3... CVE-2018-7475 6.1 MediumJune 30, 2018
• icewarp mail server Multiple directory traversal vulnerabilities in IceWarp Mail Server before 11.2 allow remote... CVE-2015-1503 Public exploit EPSS 57.0% 7.5 HighMay 8, 2018
• icewarp server In the webmail component in IceWarp Server 11.3.1.5, there was an XSS vulnerability discovered in... CVE-2017-7855 6.1 MediumAugust 31, 2017
• icewarp mail server Cross-site scripting (XSS) vulnerability in the admin panel in IceWarp Mail Server 10.4.4 allows... CVE-2017-12844 4.8 MediumAugust 23, 2017
• icewarp mail server IceWarp WebMail in IceWarp Mail Server before 10.3.3 allows remote attackers to obtain... CVE-2011-3580 5.0 MediumSeptember 30, 2011
• icewarp mail server server/webmail.php in IceWarp WebMail in IceWarp Mail Server before 10.3.3 allows remote... CVE-2011-3579 Public exploit 6.4 MediumSeptember 30, 2011
• icewarp email server, webmail server +1 more CRLF injection vulnerability in the Forgot Password implementation in server/webmail.php in... CVE-2009-1469 Public exploit 4.3 MediumMay 5, 2009
• icewarp email server, webmail server +1 more Multiple SQL injection vulnerabilities in the search form in server/webmail.php in the Groupware... CVE-2009-1468 Public exploit 6.5 MediumMay 5, 2009
• icewarp email server, webmail server +1 more Multiple cross-site scripting (XSS) vulnerabilities in IceWarp eMail Server and WebMail Server... CVE-2009-1467 Public exploit 4.3 MediumMay 5, 2009
• icewarp merak mail server Stack-based buffer overflow in the IceWarpServer.APIObject ActiveX control in api.dll in IceWarp... CVE-2009-1516 Public exploit 7.5 HighMay 4, 2009
• icewarp merak mail server Cross-site scripting (XSS) vulnerability in WebMail Pro in IceWarp Software Merak Mail Server 9.3... CVE-2008-5734 4.3 MediumDecember 26, 2008
• icewarp merak mail server Cross-site scripting (XSS) vulnerability in the Webmail interface for IceWarp Merak Mail Server... CVE-2007-5046 4.3 MediumSeptember 24, 2007
• icewarp web mail, merak mail server, deerfield visnetic mail server +2 more Absolute path directory traversal vulnerability in (a) MERAK Mail Server for Windows 8.3.8r with... CVE-2006-0817 5.0 MediumJuly 18, 2006
• icewarp web mail, merak mail server, deerfield visnetic mail server +2 more Absolute path directory traversal vulnerability in (1) MERAK Mail Server for Windows 8.3.8r with... CVE-2006-0818 4.0 MediumJuly 18, 2006
• Show olderLoading…