CVE-2001-1044: Basilix Webmail

High severity, CVSS 7.5. EPSS: 6.9% chance of exploitation in the next 30 days.

Basilix Webmail 0.9.7beta, and possibly other versions, stores *.class and *.inc files under the document root and does not restrict access, which could allows remote attackers to obtain sensitive information such as MySQL passwords and usernames from the mysql.class file.

Affected products

• Basilix Basilix Webmail: version 0.9.7_beta only

Published 2001-01-11. Last modified 2026-06-16.