← Back

Mailwasher

mailwasher

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Mailwasher Server
mailwasher_server
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2007-3275
1Mailwasher
1Mailwasher Server
Apr 23, 2026
Jun 19, 2007
N/A· v4
N/A· v3
7.1 HIGH· v2
MailWasher Server before 2.2.1, when used with LDAP or Active Directory (AD), does not properly handle blank passwords, which allows remote attackers to access an arbitrary user account and read the spam e-mail messages...Show more
MailWasher Server before 2.2.1, when used with LDAP or Active Directory (AD), does not properly handle blank passwords, which allows remote attackers to access an arbitrary user account and read the spam e-mail messages stored for that account, possibly related to the LoginCheck::doPost function in mwi/servlet/Login.cpp. NOTE: some of these details are obtained from third party information.Show less