CVE-2008-5620
RoundCube Webmail (roundcubemail) before 0.2-beta allows remote attackers to cause a denial of service (memory consumption) via crafted size parameters that are used to create a large quota image.
- Update to 0.1.1-10
Published Updated
PatchFirst · Latest vulnerabilities
roundcube vulnerabilities · Page 7
Vulnerabilities published for roundcube in the last 30 days: 20. Listed in the KEV catalogue: 0.
Vulnerabilities: 123
CVE-2008-5619
html2text.php in Chuggnutt HTML to Text Converter, as used in PHPMailer before 5.2.10, RoundCube Webmail (roundcubemail) 0.2-1.alpha and 0.2-3.beta, Mahara, and AtMail Open 1.03, allows remote attackers to execute arbitrary code via crafted input that is processed by the preg_replace function with the eval switch.
- Update to 0.1.1-9
Published UpdatedCVE-2007-6321
Cross-site scripting (XSS) vulnerability in RoundCube webmail 0.1rc2, 2007-12-09, and earlier versions, when using Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via style sheets containing expression commands.
- Update to 0.1~rc2-6
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.