CVE-2004-1671: Icewarp Web Mail

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to gain sensitive information via a direct request to (1) accountsettings_add.html or (2) topmenu.html.

Affected products

• Icewarp Web Mail: version 3.3.2 only; version 5.2.7 only; version 5.2.8 only

Published 2004-10-12. Last modified 2026-06-16.