CVE-2012-1916: Atmail Open

High severity, CVSS 7.5. EPSS: 3.4% chance of exploitation in the next 30 days.

@Mail WebMail Client in AtMail Open-Source before 1.05 allows remote attackers to execute arbitrary code via an e-mail attachment with an executable extension, leading to the creation of an executable file under tmp/.

Affected products

• Atmail Atmail Open: up to and including 1.04

Published 2012-03-27. Last modified 2026-06-16.