What’s Vulnerable › Vulnerabilities

CVE-2008-7202

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2009-09-10 · updated 2026-06-16
• Weakness: CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in OpenWebMail before 2.53 (Stable) allow remote attackers to inject arbitrary web script or HTML via unknown vectors.

Affected products

• Openwebmail.Acatysmoof Openwebmail: through 2.52; 2.20, 2.21, 2.30, 2.32, 2.40, 2.41 (+2)

References

• http://archives.neohapsis.com/archives/apps/freshmeat/2008-01/0032.html
• http://freshmeat.net/projects/openwebmail/releases/270453
• http://osvdb.org/40581
• http://archives.neohapsis.com/archives/apps/freshmeat/2008-01/0032.html
• http://freshmeat.net/projects/openwebmail/releases/270453
• http://osvdb.org/40581

Get alerted when CVE-2008-7202 or the next vulnerability affects your stack