CVE-2002-2165: Imho Webmail

Low severity, CVSS 2.1. EPSS: 0.8% chance of exploitation in the next 30 days.

The IMHO Webmail module 0.97.3 and earlier for Roxen leaks the REFERER from the browser's previous login session in an error page, which allows local users to read another user's inbox.

Affected products

• Imho Imho Webmail: version 0.96 only; version 0.96.1 only; version 0.96.2 only; version 0.96.3 only; version 0.97 only; version 0.97.1 only; …

Published 2002-12-31. Last modified 2026-06-16.