Zarafa Webaccess vulnerabilities

• zarafa webaccess Unauthenticated reflected cross-site scripting (XSS) exists in Zarafa Webapp 2.0.1.47791 and... CVE-2019-7219 Public exploit 6.1 MediumApril 11, 2019
• zarafa webaccess, webapp +1 more Zarafa WebAccess 4.1 and WebApp uses world-readable permissions for the files in their tmp... CVE-2014-5449 2.1 LowSeptember 22, 2014