CVE-2005-1650: Woppoware Postmaster

Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days.

The web mail service in Woppoware PostMaster 4.2.2 (build 3.2.5) generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames.

Affected products

• Woppoware Postmaster: version 4.2.2 only

Published 2005-05-18. Last modified 2026-06-16.