CVE-2007-3275

MailWasher Server before 2.2.1, when used with LDAP or Active Directory (AD), does not properly handle blank passwords, which allows remote attackers to access an arbitrary user account and read the spam e-mail messages stored for that account, possibly related to the LoginCheck::doPost function in mwi/servlet/Login.cpp. NOTE: some of these details are obtained from third party information.

• CWE-255

• http://osvdb.org/37538
• http://secunia.com/advisories/25695Patch, Vendor Advisory
• http://sourceforge.net/project/shownotes.php?release_id=515127
• http://www.securityfocus.com/bid/24507
• http://www.vupen.com/english/advisories/2007/2239Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34925
• http://osvdb.org/37538
• http://secunia.com/advisories/25695Patch, Vendor Advisory
• http://sourceforge.net/project/shownotes.php?release_id=515127
• http://www.securityfocus.com/bid/24507
• http://www.vupen.com/english/advisories/2007/2239Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34925

Published

Jun 19, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-3269Multiple cross-site scripting (XSS) vulnerabilities in Papoo…
• CVE-2007-3270PHP remote file inclusion vulnerability in Includes/global.i…
• CVE-2007-3271PHP remote file inclusion vulnerability in templates/2blue/b…
• CVE-2007-3272Directory traversal vulnerability in index.php in MiniBB 2.0…
• CVE-2007-3273SQL injection vulnerability in index.cfm in FuseTalk 2.0 all…
• CVE-2007-3274Apple Safari 3.0 and 3.0.1 on Windows XP SP2 allows attacker…
• CVE-2007-3276Cross-site scripting (XSS) vulnerability in index.php in Sit…
• CVE-2007-3277Unspecified vulnerability in the localization before 1.2 mod…
• CVE-2007-3278PostgreSQL 8.1 and probably later versions, when local trust…
• CVE-2007-3279PostgreSQL 8.1 and probably later versions, when the PL/pgSQ…
• CVE-2007-3280The Database Link library (dblink) in PostgreSQL 8.1 impleme…
• CVE-2007-3281Cross-site scripting (XSS) vulnerability in index.php in Php…