What’s Vulnerable › Products

Icewarp Mail Server vulnerabilities

19 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Icewarp Mail Server version is affected

Latest Icewarp Mail Server vulnerabilities

• CVE-2025-40632 — Cross-site scripting (XSS) vulnerability in IceWarp Mail Server (CVSS 6.1)
• CVE-2025-40631 — HTTP host header injection vulnerability in IceWarp Mail Server (CVSS 6.1)
• CVE-2025-40630 — Open redirection vulnerability in IceWarp Mail Server (CVSS 6.1)
• CVE-2023-39700 — (CVSS 6.1)
• CVE-2023-39699 — (CVSS 9.8)
• CVE-2021-36580 — (CVSS 6.1)
• CVE-2020-27982 — (CVSS 6.1)
• CVE-2020-14066 — (CVSS 8.8)
• CVE-2020-14065 — (CVSS 6.5)
• CVE-2020-14064 — (CVSS 6.5)
• CVE-2019-19265 — (CVSS 6.1)
• CVE-2019-19266 — (CVSS 5.4)
• CVE-2019-12593 — (CVSS 7.5)
• CVE-2018-16324 — (CVSS 6.1)
• CVE-2018-7475 — (CVSS 6.1)
• CVE-2015-1503 — (CVSS 7.5)
• CVE-2017-12844 — (CVSS 4.8)
• CVE-2011-3580 — (CVSS 5.0)
• CVE-2011-3579 — (CVSS 6.4)