CVE-2006-2346: INTER7 Vpopmail (vchkpw)

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

vpopmail 5.4.14 and 5.4.15, with cleartext passwords enabled, allows remote attackers to authenticate to an account that does not have a cleartext password set by using a blank password to (1) SMTP AUTH or (2) APOP.

Affected products

• INTER7 Vpopmail (vchkpw): version 5.4.14 only; version 5.4.15 only

Published 2006-05-12. Last modified 2026-06-16.