CVE-2005-0321

LOW 2.1CVE-2005-0321 · Published 02/05/2005 · updated 16/06/2026

In short

CVE-2005-0321 is a LOW (CVSS 2.1) vulnerability affecting web mail (icewarp), mail server (merak).
Chance of exploitation in the next 30 days (EPSS): 0.68%, higher than 52.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
web mail icewarp	`= 5.3.0`	No fix yet
mail server merak	`= 7.6.0`	No fix yet

Description

MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allows remote authenticated users to gain sensitive information via an HTTP request to (1) calendar_d.html, (2) calendar_m.html, (3) calendar_w.html, or (4) calendar_y.html, which reveal the installation path.

References

marc.info
exchange.xforce.ibmcloud.com/vulnerabilities/19152

More vulnerabilities in web mail

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free