Known Vulnerabilities for products from Merak

Listed below are 20 of the newest known vulnerabilities associated with the vendor "Merak".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2009-0350 json Stack-based buffer overflow in Merak Media Player 3.2 allows remote attackers to execute arbitrary code via a long string in ... Not Provided 2009-01-29 2026-04-23
CVE-2008-0218 json Cross-site scripting (XSS) vulnerability in admin/index.html in Merak IceWarp Mail Server allows remote attackers to inject a... Not Provided 2008-01-10 2026-04-23
CVE-2006-0818 json Absolute path directory traversal vulnerability in (1) MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.... Not Provided 2006-07-21 2025-04-03
CVE-2006-0817 json Absolute path directory traversal vulnerability in (a) MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.... Not Provided 2006-07-21 2025-04-03
CVE-2005-4559 json mail/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build... Not Provided 2005-12-28 2025-04-03
CVE-2005-4558 json IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not properly... Not Provided 2005-12-28 2025-04-03
CVE-2005-4557 json dir/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build ... Not Provided 2005-12-28 2025-04-03
CVE-2005-4556 json PHP remote file include vulnerability in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server... Not Provided 2005-12-28 2025-04-03
CVE-2005-3133 json Multiple directory traversal vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier ve... Not Provided 2005-10-04 2025-04-03
CVE-2005-3132 json MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allows remote attackers to obtain sensit... Not Provided 2005-10-04 2025-04-03
CVE-2005-3131 json Multiple cross-site scripting (XSS) vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly ear... Not Provided 2005-10-04 2025-04-03
CVE-2005-1491 json Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allows remote authenticated users to (1) move their home directory via vi... Not Provided 2005-05-11 2025-04-03
CVE-2005-1490 json Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2, when the mailbox.dat file does not exist, allows remote authenticated us... Not Provided 2005-05-11 2025-04-03
CVE-2005-1489 json Unknown vulnerability in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allows remote authenticated users to obtain the ... Not Provided 2005-05-11 2025-04-03
CVE-2005-1488 json Multiple cross-site scripting (XSS) vulnerabilities in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allow remote authe... Not Provided 2005-05-11 2025-04-03
CVE-2005-0322 json MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 and Mail Server 7.6.4r with Icewarp Mail Server 5.3.2 uses weak encryptio... Not Provided 2005-05-02 2025-04-03
CVE-2005-0321 json MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allows remote authenticated users to gain sensitive information via an HT... Not Provided 2005-05-02 2025-04-03
CVE-2004-1722 json SQL injection vulnerability in calendar.html in Merak Mail Server 5.2.7 allows remote attackers to execute arbitrary SQL stat... Not Provided 2004-08-17 2025-04-03
CVE-2004-1721 json The (1) function.php or (2) function.view.php scripts in Merak Mail Server 5.2.7 allow remote attackers to read arbitrary PHP... Not Provided 2004-08-17 2025-04-03
CVE-2004-1720 json The (1) address.html and possibly (2) calendar.html pages in Merak Mail Server 5.2.7 allow remote attackers to gain sensitive... Not Provided 2004-08-17 2025-04-03