CVE-2005-0321

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-05-02 · updated 2026-06-16

Description

MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allows remote authenticated users to gain sensitive information via an HTTP request to (1) calendar_d.html, (2) calendar_m.html, (3) calendar_w.html, or (4) calendar_y.html, which reveal the installation path.

Affected products

IceWarp Web Mail: 5.3.0
Merak Mail Server: 7.6.0

References

http://marc.info/?l=bugtraq&m=110693950205007&w=2
https://exchange.xforce.ibmcloud.com/vulnerabilities/19152
http://marc.info/?l=bugtraq&m=110693950205007&w=2
https://exchange.xforce.ibmcloud.com/vulnerabilities/19152

Get alerted when CVE-2005-0321 or the next vulnerability affects your stack