Icewarp Server vulnerabilities

• icewarp mail server Cross-site scripting (XSS) vulnerability in IceWarp Mail Server CVE-2025-40632 2.0 LowMay 16, 2025
• icewarp mail server HTTP host header injection vulnerability in IceWarp Mail Server CVE-2025-40631 2.0 LowMay 16, 2025
• icewarp mail server Open redirection vulnerability in IceWarp Mail Server CVE-2025-40630 5.1 MediumMay 16, 2025
• icewarp mail server IceWarp Mail Server v10.4.5 was discovered to contain a reflected cross-site scripting (XSS)... CVE-2023-39700 6.1 MediumAugust 24, 2023
• icewarp mail server IceWarp Mail Server v10.4.5 was discovered to contain a local file inclusion (LFI) vulnerability... CVE-2023-39699 9.8 CriticalAugust 24, 2023
• icewarp server, mail server +1 more Open Redirect vulnerability exists in IceWarp MailServer IceWarp Server Deep Castle 2 Update 1 ... CVE-2021-36580 6.1 MediumJuly 27, 2023
• icewarp mail server IceWarp 11.4.5.0 allows XSS via the language parameter. CVE-2020-27982 6.1 MediumNovember 2, 2020
• icewarp mail server IceWarp Email Server 12.3.0.1 allows remote attackers to upload JavaScript files that are... CVE-2020-14066 Public exploit 8.8 HighJuly 15, 2020
• icewarp mail server IceWarp Email Server 12.3.0.1 allows remote attackers to upload files and consume disk space. CVE-2020-14065 Public exploit 6.5 MediumJuly 15, 2020
• icewarp mail server IceWarp Email Server 12.3.0.1 has Incorrect Access Control for user accounts. CVE-2020-14064 Public exploit 6.5 MediumJuly 15, 2020
• icewarp server In IceWarp Webmail Server through 11.4.4.1, there is XSS in the /webmail/ color parameter. CVE-2020-8512 Public exploit EPSS 14.8% 6.1 MediumJanuary 31, 2020
• icewarp mail server IceWarp WebMail Server 12.2.0 and 12.1.x before 12.2.1.1 (and probably earlier versions) allows... CVE-2019-19265 6.1 MediumJanuary 6, 2020
• icewarp mail server IceWarp WebMail Server 12.2.0 and 12.1.x before 12.2.1.1 (and probably earlier versions) allows... CVE-2019-19266 5.4 MediumJanuary 6, 2020
• icewarp mail server IceWarp Mail Server through 10.4.4 is prone to a local file inclusion vulnerability via webmail... CVE-2019-12593 Public exploit EPSS 41.0% 7.5 HighJune 3, 2019
• icewarp mail server In IceWarp Server 12.0.3.1 and before, there is XSS in the /webmail/ username field. CVE-2018-16324 6.1 MediumSeptember 1, 2018
• icewarp mail server Cross-site scripting (XSS) vulnerability for webdav/ticket/ URIs in IceWarp Mail Server 12.0.3... CVE-2018-7475 6.1 MediumJune 30, 2018
• icewarp mail server Multiple directory traversal vulnerabilities in IceWarp Mail Server before 11.2 allow remote... CVE-2015-1503 Public exploit EPSS 57.0% 7.5 HighMay 8, 2018
• icewarp server In the webmail component in IceWarp Server 11.3.1.5, there was an XSS vulnerability discovered in... CVE-2017-7855 6.1 MediumAugust 31, 2017
• icewarp mail server Cross-site scripting (XSS) vulnerability in the admin panel in IceWarp Mail Server 10.4.4 allows... CVE-2017-12844 4.8 MediumAugust 23, 2017
• icewarp mail server IceWarp WebMail in IceWarp Mail Server before 10.3.3 allows remote attackers to obtain... CVE-2011-3580 5.0 MediumSeptember 30, 2011
• icewarp mail server server/webmail.php in IceWarp WebMail in IceWarp Mail Server before 10.3.3 allows remote... CVE-2011-3579 Public exploit 6.4 MediumSeptember 30, 2011
• icewarp email server, webmail server +1 more CRLF injection vulnerability in the Forgot Password implementation in server/webmail.php in... CVE-2009-1469 Public exploit 4.3 MediumMay 5, 2009
• icewarp email server, webmail server +1 more Multiple SQL injection vulnerabilities in the search form in server/webmail.php in the Groupware... CVE-2009-1468 Public exploit 6.5 MediumMay 5, 2009
• icewarp email server, webmail server +1 more Multiple cross-site scripting (XSS) vulnerabilities in IceWarp eMail Server and WebMail Server... CVE-2009-1467 Public exploit 4.3 MediumMay 5, 2009
• icewarp merak mail server Stack-based buffer overflow in the IceWarpServer.APIObject ActiveX control in api.dll in IceWarp... CVE-2009-1516 Public exploit 7.5 HighMay 4, 2009
• icewarp merak mail server Cross-site scripting (XSS) vulnerability in WebMail Pro in IceWarp Software Merak Mail Server 9.3... CVE-2008-5734 4.3 MediumDecember 26, 2008
• icewarp merak mail server Cross-site scripting (XSS) vulnerability in the Webmail interface for IceWarp Merak Mail Server... CVE-2007-5046 4.3 MediumSeptember 24, 2007