CVE-2000-0610: Netwin Cwmail

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to bypass authentication and use the server for mail relay via a username that contains a carriage return.

Affected products

• Netwin Cwmail: version 2.6g only
• Netwin Dmailweb: version 2.6g only

Published 2000-06-23. Last modified 2026-06-16.