CVE-2006-3566: Hivemail

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

search.results.php in HiveMail 3.1 and earlier allows remote attackers to obtain the installation path via certain manipulations related to the (1) searchdate and (2) folderids parameters.

Affected products

• Hivemail Hivemail: up to and including 3.1; version 1.1 only; version 1.1.1 only; version 1.2 only; version 1.2.1_beta1 only; version 1.2.1_rc only; …

Published 2006-07-13. Last modified 2026-06-16.