[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fQnFHvh8E5O5HczLWQ9r_Y4d9hx6NXc9KA--vIlIo2Pk":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":19,"kevVulnerabilities":79,"topProductsByCves":80,"seoMetadata":82,"meta":91},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":18},23139,"open_webmail",1,13,0,18,"2007-08-07","o",[16],{"id":17,"product_name":8,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},123478,"Open_webmail is a technology vendor with 1 tracked product and 13 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[20,29,34,41,48,53,58,64,69,74],{"cveId":21,"description":22,"publishedDate":23,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":28},"CVE-2004-0520","Cross-site scripting (XSS) vulnerability in mime.php for SquirrelMail before 1.4.3 allows remote attackers to insert arbitrary HTML and script via the content-type mail header, as demonstrated using read_body.php.","2004-08-18",6.8,"v2","Medium",false,0.07134,{"cveId":30,"description":31,"publishedDate":32,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":33},"CVE-2004-0639","Multiple cross-site scripting (XSS) vulnerabilities in Squirrelmail 1.2.10 and earlier allow remote attackers to inject arbitrary HTML or script via (1) the $mailer variable in read_body.php, (2) the $senderNames_part variable in mailbox_display.php, and possibly other vectors including (3) the $event_title variable or (4) the $event_text variable.","2004-08-06",0.05956,{"cveId":35,"description":36,"publishedDate":37,"cvssScore":38,"cvssVersion":25,"severity":39,"isKev":27,"epssScore":40},"CVE-2004-2284","The read_list_from_file function in vacation.pl for OpenWebmail before 2.32 20040629 allows remote attackers to execute arbitrary commands via shell metacharacters in a filename argument.","2004-12-31",10,"Critical",0.03404,{"cveId":42,"description":43,"publishedDate":44,"cvssScore":45,"cvssVersion":25,"severity":46,"isKev":27,"epssScore":47},"CVE-2005-1435","Open WebMail (OWM) before 2.51 20050430 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a filename.","2005-05-03",7.5,"High",0.02112,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":52},"CVE-2006-2190","Cross-site scripting (XSS) vulnerability in ow-shared.pl in OpenWebMail (OWM) 2.51 and earlier allows remote attackers to inject arbitrary web script or HTML via the sessionid parameter in (1) openwebmail-send.pl, (2) openwebmail-advsearch.pl, (3) openwebmail-folder.pl, (4) openwebmail-prefs.pl, (5) openwebmail-abook.pl, (6) openwebmail-read.pl, (7) openwebmail-cal.pl, and (8) openwebmail-webdisk.pl.  NOTE: the openwebmail-main.pl vector is already covered by CVE-2005-2863.","2006-05-04",0.01602,{"cveId":54,"description":55,"publishedDate":37,"cvssScore":56,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":57},"CVE-2004-2458","Open WebMail 2.30 and earlier, when use_syshomedir is disabled or create_syshomedir is enabled, creates new directories before authenticating, which allows remote attackers to create arbitrary directories.",5,0.01351,{"cveId":59,"description":60,"publishedDate":61,"cvssScore":62,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":63},"CVE-2005-0445","Cross-site scripting (XSS) vulnerability in Open WebMail 2.x allows remote attackers to inject arbitrary HTML or web script via the domain name parameter (logindomain) in the login page.","2005-05-02",4.3,0.0133,{"cveId":65,"description":66,"publishedDate":67,"cvssScore":62,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":68},"CVE-2006-3233","Cross-site scripting (XSS) vulnerability in openwebmail-read.pl in Open WebMail (OWM) 2.52, and other versions released before 06\u002F18\u002F2006, allows remote attackers to inject arbitrary web script or HTML via the from field.  NOTE: some third party sources have mentioned the \"to\" and \"from\" fields, although CVE analysis shows that these are associated with the previous version, a different executable, and a different CVE.","2006-06-27",0.01317,{"cveId":70,"description":71,"publishedDate":72,"cvssScore":56,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":73},"CVE-2002-2410","openwebmail.pl in Open WebMail 1.7 and 1.71 reveals sensitive information in error messages and generates different responses whether a user exists or not, which allows remote attackers to identify valid usernames via brute force attacks and obtain certain configuration and version information.","2002-12-31",0.01309,{"cveId":75,"description":76,"publishedDate":77,"cvssScore":62,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":78},"CVE-2005-2863","Cross-site scripting (XSS) vulnerability in openwebmail-main.pl in OpenWebMail 2.41 allows remote attackers to inject arbitrary web script or HTML via the sessionid parameter.","2005-09-08",0.01164,[],[81],{"id":17,"product_name":8,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},{"title":83,"metaDescription":84,"keywords":85,"structuredData":86},"Open_webmail - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Open_webmail covering 1 product with 13 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Open_webmail vulnerabilities, Open_webmail security, Open_webmail CVE, Open_webmail threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":87,"@type":88,"name":89,"description":84,"url":90},"https:\u002F\u002Fschema.org","Organization","Open_webmail","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fopen_webmail",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":92,"apiVersion":93},"2026-10-28T16:32:54.648Z","3.0"]