CVE-2007-6196: Calacode Atmail Webmail System

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in util.php in Calacode @Mail before 5.2 allows remote attackers to inject arbitrary web script or HTML via the func parameter.

Affected products

• Calacode Atmail Webmail System: up to and including 5.1

Published 2007-12-01. Last modified 2026-06-16.