Webmin Usermin vulnerabilities

• usermin Usermin through 2.570 XSS via mailbox detach.cgi type Parameter CVE-2026-123622 5.1 MediumNovember 6, 2026
• usermin Usermin through 2.570 Path Traversal File Write via detachall.cgi CVE-2026-123621 8.6 HighNovember 6, 2026
• usermin Usermin through 2.570 OS Command Injection via Read Mail IMAP Folder Deletion CVE-2026-123620 7.7 HighNovember 6, 2026
• usermin Usermin 0.980 through 1.x before 1.660 allows uconfig_save.cgi sig_file_free remote code... CVE-2015-2079 9.9 CriticalApril 28, 2025
• webmin usermin A discrepancy in error messages for invalid login attempts in Webmin Usermin v2.100 allows... CVE-2024-44762 Public exploit 5.3 MediumOctober 16, 2024
• usermin, webmin +1 more Cross-site scripting vulnerability exists in session_login.cgi of Webmin versions prior to 1.970... CVE-2024-36453 6.1 MediumJuly 10, 2024
• webmin usermin Multiple stored cross-site scripting (XSS) vulnerabilities in Usermin 2.000 allow remote... CVE-2023-41157 5.4 MediumSeptember 16, 2023
• webmin usermin A Stored Cross-Site Scripting (XSS) vulnerability in the SSH configuration tab in Usermin 2.001... CVE-2023-41160 5.4 MediumSeptember 14, 2023
• webmin usermin A Stored Cross-Site Scripting (XSS) vulnerability while editing the autoreply file page in... CVE-2023-41159 5.4 MediumSeptember 14, 2023
• webmin usermin A Stored Cross-Site Scripting (XSS) vulnerability in the filter and forward mail tab in Usermin 2... CVE-2023-41156 5.4 MediumSeptember 14, 2023
• webmin usermin A Reflected Cross-site scripting (XSS) vulnerability in the file manager tab in Usermin 2.000... CVE-2023-41162 6.1 MediumSeptember 13, 2023
• webmin usermin A Stored Cross-Site Scripting (XSS) vulnerability in the MIME type programs tab in Usermin 2.000... CVE-2023-41158 5.4 MediumSeptember 13, 2023
• webmin usermin, webmin +1 more A Stored Cross-Site Scripting (XSS) vulnerability in the mail forwarding and replies tab in... CVE-2023-41155 5.4 MediumSeptember 13, 2023
• webmin usermin A Stored Cross-Site Scripting (XSS) vulnerability in the scheduled cron jobs tab in Usermin 2.000... CVE-2023-41154 5.4 MediumSeptember 13, 2023
• webmin usermin A Stored Cross-Site Scripting (XSS) vulnerability in the MIME type programs tab in Usermin 2.000... CVE-2023-41152 5.4 MediumSeptember 13, 2023
• webmin usermin Multiple stored cross-site scripting (XSS) vulnerabilities in Usermin 2.000 allow remote... CVE-2023-41161 5.4 MediumSeptember 7, 2023
• webmin usermin A Stored Cross-Site Scripting (XSS) vulnerability in the SSH configuration tab in Usermin 2.001... CVE-2023-41153 5.4 MediumAugust 29, 2023
• webmin usermin Usermin through 1.850 allows a remote authenticated user to execute OS commands via command... CVE-2022-35132 8.8 HighOctober 25, 2022
• webmin usermin, webmin +1 more The Read Mail module in Webmin 1.995 and Usermin through 1.850 allows XSS via a crafted HTML e... CVE-2022-36880 6.1 MediumJuly 27, 2022
• webmin usermin Multiple cross-site scripting (XSS) vulnerabilities in (1) filter/save_forward.cgi, (2) filter... CVE-2016-4897 6.1 MediumApril 12, 2017
• webmin usermin Cross-site scripting (XSS) vulnerability in Usermin before 1.600 allows remote attackers to... CVE-2014-3884 4.3 MediumJuly 20, 2014
• webmin usermin Usermin before 1.600 allows remote attackers to execute arbitrary operating-system commands via... CVE-2014-3883 6.8 MediumJune 21, 2014
• webmin usermin, webmin +1 more Cross-site scripting (XSS) vulnerability in Webmin before 1.500 and Usermin before 1.430 allows... CVE-2009-4568 4.3 MediumJanuary 5, 2010
• webmin usermin, webmin +1 more Cross-site scripting (XSS) vulnerability in Webmin 1.370 and 1.390 and Usermin 1.300 and 1.320... CVE-2008-0720 4.3 MediumFebruary 12, 2008
• webmin usermin, webmin +1 more Multiple cross-site scripting (XSS) vulnerabilities in pam_login.cgi in Webmin before 1.350 and... CVE-2007-3156 4.3 MediumJune 11, 2007