CVE-2018-16324: Icewarp Mail Server

Medium severity, CVSS 6.1. EPSS: 1.1% chance of exploitation in the next 30 days.

In IceWarp Server 12.0.3.1 and before, there is XSS in the /webmail/ username field.

Affected products

• Icewarp Mail Server: up to and including 12.0.3.1

Published 2018-09-01. Last modified 2026-06-17.