CVE-2001-0021: Endymion Mailman Webmail

High severity, CVSS 10.0. EPSS: 13.5% chance of exploitation in the next 30 days.

MailMan Webmail 3.0.25 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the alternate_template parameter.

Affected products

• Endymion Mailman Webmail: version 3.0 only; version 3.0.1 only; version 3.0.10 only; version 3.0.11 only; version 3.0.12 only; version 3.0.13 only; …

Published 2001-02-16. Last modified 2026-06-16.