| Package | Affected versions | Patched versions |
|---|---|---|
| miramail | ≤ 1.04 |
Nevrona Designs MiraMail 1.04 and earlier stores authentication information such as POP usernames and passwords in plaintext in a .ini file, which allows an attacker to gain privileges by reading the passwords from the file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free