CVE-2002-2165

Published: Dec 31, 2002Modified: Apr 16, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

The IMHO Webmail module 0.97.3 and earlier for Roxen leaks the REFERER from the browser's previous login session in an error page, which allows local users to read another user's inbox.

Affected (9)

Products: Imho: Imho Webmail

Imho

1 product

Imho Webmail

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Imho Imho Webmail	Version 0.96.1
Imho Imho Webmail	Version 0.96.2
Imho Imho Webmail	Version 0.96.3
Imho Imho Webmail	Version 0.96
Imho Imho Webmail	Version 0.97.1
Imho Imho Webmail	Version 0.97
Imho Imho Webmail	Version 0.98.2
Imho Imho Webmail	Version 0.98.3
Imho Imho Webmail	Version 0.98