CVE-2009-3199: Uebimiau

Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days.

Uebimiau Webmail 3.2.0-2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database with usernames and password hashes via a direct request for system_admin/admin.ucf.

Affected products

• Uebimiau Uebimiau: version 3.2.0-2.0 only

Published 2009-09-15. Last modified 2026-06-16.