CVE-2005-1516: Netwin Dmail

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

DList (dlist.exe) in DMail 3.1a allows remote attackers to bypass authentication, read log files, and shutdown the system via a sendlog command with an incorrect password hash, which is not properly handled by the _cmd_sendlog function.

Affected products

• Netwin Dmail: version 3.1a only

Published 2005-05-11. Last modified 2026-06-16.