CVE-2005-0445

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-05-02 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in Open WebMail 2.x allows remote attackers to inject arbitrary HTML or web script via the domain name parameter (logindomain) in the login page.

Affected products

Open Webmail: 2.00, 2.01, 2.10, 2.20, 2.21, 2.30 (+4)

References

http://secunia.com/advisories/14253
http://securitytracker.com/id?1013172
http://turtle.ee.ncku.edu.tw/openwebmail/doc/changes.txt
http://turtle.ee.ncku.edu.tw/openwebmail/download/cert/patches/SA-05:01/2.5x.patch
http://www.securityfocus.com/bid/12547
https://exchange.xforce.ibmcloud.com/vulnerabilities/19335
http://secunia.com/advisories/14253
http://securitytracker.com/id?1013172
http://turtle.ee.ncku.edu.tw/openwebmail/doc/changes.txt
http://turtle.ee.ncku.edu.tw/openwebmail/download/cert/patches/SA-05:01/2.5x.patch
http://www.securityfocus.com/bid/12547
https://exchange.xforce.ibmcloud.com/vulnerabilities/19335

Get alerted when CVE-2005-0445 or the next vulnerability affects your stack