CVE-2005-2595: Dada Mail

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Dada Mail before 2.10 Alpha 1 allows remote attackers to execute arbitrary Javascript via archived messages.

Affected products

• Dada Mail Dada Mail: version 2.8.10 only; version 2.8.11 only; version 2.8.12 only; version 2.8.12_beta only; version 2.8.13 only; version 2.8.13_alpha1 only; …

Published 2005-08-17. Last modified 2026-06-16.