CVE-2005-2820: inter7 sqwebmail

EPSS trend

Probability

2.17%

Chance of exploitation in the next 30 days

Percentile

82%

Versus all other CVEs

30-day change

0.00 pp

From 2.17% on 20-09-2026

20-09-202620-10-2026

EPSS score

2.17%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

9 links

secunia.com/advisories/16704/Third Party AdvisoryX Refsource SECUNIA
exchange.xforce.ibmcloud.com/vulnerabilities/22158VDB EntryX Refsource XF
marc.info?l=bugtraq&m=112607033030475&w=2Mailing ListX Refsource BUGTRAQ
secunia.com/advisories/17156Third Party AdvisoryX Refsource SECUNIA
www.ubuntu.com/usn/usn-201-1Vendor AdvisoryX Refsource UBUNTU
secunia.com/secunia_research/2005-44/advisory/X Refsource MISCPatch
www.debian.org/security/2005/dsa-820Vendor AdvisoryX Refsource DEBIAN
www.securiteam.com/unixfocus/5RP0220GUS.htmlX Refsource MISC
security-tracker.debian.org/tracker/CVE-2005-2820Advisory

Related vulnerabilities

CVE-2005-2724debiancourier+11.75%21y ago29-08-2005 04:00Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 allows remote attackers to inject arbitrary web script or HTML via a file attachment that is processed by the Display feature. NOTE: the severity of this issue has been disputed by the developer.CVE-2005-2769debiancourier+12.73%21y ago02-09-2005 04:00Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 and possibly other versions allows remote attackers to inject arbitrary web script or HTML via an HTML e-mail containing tags with strings that contain ">" or other special characters, which is not properly sanitized by SqWebMail.CVE-2005-1308debiancourier+12.28%21y ago27-04-2005 04:00SqWebMail allows remote attackers to inject arbitrary web script or HTML via CRLF sequences in the redirect parameter followed by the desired script or HTML.CVE-2004-2313debiancourier+11.63%21y ago16-08-2005 04:00Inter7 SqWebMail 3.4.1 through 3.6.1 generates different error messages for incorrect passwords versus correct passwords on non-mail-enabled accounts (such as root), which allows remote attackers to guess the root password via brute force attacks.CVE-2004-0591debiancourier+14.97%22y ago24-06-2004 04:00Cross-site scripting (XSS) vulnerability in the print_header_uc function for SqWebMail 4.0.4 and earlier, and possibly 3.x, allows remote attackers to inject arbitrary web script or HRML via (1) e-mail headers or (2) a message with a "message/delivery-status" MIME Content-Type.

All vulnerabilities insqwebmail

CVE-2005-2820: inter7 sqwebmail

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References