CVE-2004-1721: Merak Mail Server

Medium severity, CVSS 5.0. EPSS: 2.4% chance of exploitation in the next 30 days.

The (1) function.php or (2) function.view.php scripts in Merak Mail Server 5.2.7 allow remote attackers to read arbitrary PHP files via a direct HTTP request to port 32000.

Affected products

• Merak Mail Server: version 5.2.7 only

Published 2004-08-17. Last modified 2026-06-16.