CVE-2002-1416: Webeasymail

Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days.

The POP3 service for WebEasyMail 3.4.2.2 and earlier generates diffferent error messages for valid and invalid usernames during authentication, which makes it easier for remote attackers to conduct brute force attacks.

Affected products

• Webeasymail Webeasymail: up to and including 3.4.2.2

Published 2003-04-11. Last modified 2026-06-16.