CVE-2004-2385: Emumail Emu Webmail

Medium severity, CVSS 5.0. EPSS: 6.7% chance of exploitation in the next 30 days.

EMU Webmail 5.2.7 allows remote attackers to obtain sensitive path information (home directory) via an HTTP request for init.emu.

Affected products

• Emumail Emu Webmail: version 5.2.7 only

Published 2004-12-31. Last modified 2026-06-16.