CVE-2002-0455: Incredimail

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

IncrediMail stores attachments in a directory with a fixed name, which could make it easier for attackers to exploit vulnerabilities in other software that rely on installing and reading files from directories with known pathnames.

Affected products

• Incredimail Incredimail: version build_560 only; version build_618 only; version build_1400185 only

Published 2002-08-12. Last modified 2026-06-16.