CVE-2000-0772: Tumbleweed Messaging Management System

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

The installation of Tumbleweed Messaging Management System (MMS) 4.6 and earlier (formerly Worldtalk Worldsecure) creates a default account "sa" with no password.

Affected products

• Tumbleweed Messaging Management System: version 4.3 only; version 4.5 only; version 4.6 only

Published 2000-10-20. Last modified 2026-06-16.