CVE-2005-2183: Phpxmail

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

class.xmail.php in PhpXmail 0.7 through 1.1 does not properly handle large passwords, which prevents an error message from being returned and allows remote attackers to bypass authentication and gain unauthorized access.

Affected products

• Phpxmail Phpxmail: version 0.7 only; version 1.1 only

Published 2005-07-11. Last modified 2026-06-16.