| Package | Affected versions | Patched versions |
|---|---|---|
| cwmail | = 2.6g | |
| dmailweb | = 2.6g |
The default configuration of NetWin dMailWeb and cwMail trusts all POP servers, which allows attackers to bypass normal authentication and cause a denial of service.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free