CVE-2008-7202: Openwebmail.acatysmoof Openwebmail

Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in OpenWebMail before 2.53 (Stable) allow remote attackers to inject arbitrary web script or HTML via unknown vectors.

Affected products

• Openwebmail.acatysmoof Openwebmail: up to and including 2.52; version 2.20 only; version 2.21 only; version 2.30 only; version 2.32 only; version 2.40 only; …

Published 2009-09-10. Last modified 2026-06-16.