CVE-2004-1719

Multiple cross-site scripting (XSS) vulnerabilities in Merak Webmail Server 5.2.7 allow remote attackers to inject arbitrary web script or HTML via the (1) category, (2) cserver, (3) ext, (4) global, (5) showgroups, (6) or showlite parameters to address.html, or the (7) spage or (8) autoresponder parameters to settings.html, the (9) folder parameter to readmail.html, or the (10) attachmentpage_text_error parameter to attachment.html, (11) folder, (12) ct, or (13) cv parameters to calendar.html, (14) an <img> tag, or (15) the subject of an e-mail message.

• http://marc.info/?l=bugtraq&m=109279057326044&w=2
• http://packetstormsecurity.nl/0408-exploits/merak527.txtExploit, Patch, Vendor Advisory
• http://secunia.com/advisories/12269Exploit, Patch, Vendor Advisory
• http://securitytracker.com/id?1010969
• http://www.osvdb.org/9037Patch, Vendor Advisory
• http://www.osvdb.org/9038Patch, Vendor Advisory
• http://www.osvdb.org/9039Patch, Vendor Advisory
• http://www.osvdb.org/9040Patch, Vendor Advisory
• http://www.osvdb.org/9041Patch, Vendor Advisory
• http://www.osvdb.org/9042Patch, Vendor Advisory
• http://www.securityfocus.com/bid/10966Exploit, Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17024
• http://marc.info/?l=bugtraq&m=109279057326044&w=2
• http://packetstormsecurity.nl/0408-exploits/merak527.txtExploit, Patch, Vendor Advisory
• http://secunia.com/advisories/12269Exploit, Patch, Vendor Advisory
• http://securitytracker.com/id?1010969
• http://www.osvdb.org/9037Patch, Vendor Advisory
• http://www.osvdb.org/9038Patch, Vendor Advisory
• http://www.osvdb.org/9039Patch, Vendor Advisory
• http://www.osvdb.org/9040Patch, Vendor Advisory
• http://www.osvdb.org/9041Patch, Vendor Advisory
• http://www.osvdb.org/9042Patch, Vendor Advisory
• http://www.securityfocus.com/bid/10966Exploit, Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17024

Published

Aug 17, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-1713Unknown vulnerability in HP Process Resource Manager (PRM) C…
• CVE-2004-1714BlackICE PC Protection and Server Protection installs (1) fi…7.1
• CVE-2004-1715Directory traversal vulnerability in MIMEsweeper for Web bef…
• CVE-2004-1716Cross-site scripting (XSS) vulnerability in PForum before 1.…
• CVE-2004-1717Multiple buffer overflows in the psscan function in ps.c for…
• CVE-2004-1718The ZwOpenSection function in Integrity Protection Driver (I…
• CVE-2004-1720The (1) address.html and possibly (2) calendar.html pages in…
• CVE-2004-1721The (1) function.php or (2) function.view.php scripts in Mer…
• CVE-2004-1722SQL injection vulnerability in calendar.html in Merak Mail S…
• CVE-2004-1723The (1) updateuser.php and (2) forums_prune.php scripts in P…
• CVE-2004-1724The ReadMe First.txt file in PHP-Fusion 4.0 instructs users …
• CVE-2004-1725Stack-based buffer overflow in xvbmp.c in XV allows remote a…