cve,link,title,description,vendor,products,score,severity,epss,cisa,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score CVE-2004-2766,https://securityvulnerability.io/vulnerability/CVE-2004-2766,,"Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 before 5.2hf2.02 allows remote attackers to obtain unspecified ""access"" to e-mail via a crafted e-mail message, related to a ""session hijacking"" issue, a different vulnerability than CVE-2005-2022 and CVE-2006-5486.",Oracle,Iplanet Messaging Server,,,0.0032399999909102917,false,false,false,false,,false,false,2010-01-28T20:30:00.000Z,0 CVE-2004-2765,https://securityvulnerability.io/vulnerability/CVE-2004-2765,,"Cross-site scripting (XSS) vulnerability in Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 before 5.2hf2.02, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via a crafted e-mail message, a different vulnerability than CVE-2005-2022 and CVE-2006-5486.",Oracle,Iplanet Messaging Server,,,0.0013000000035390258,false,false,false,false,,false,false,2010-01-28T20:30:00.000Z,0 CVE-2006-5652,https://securityvulnerability.io/vulnerability/CVE-2006-5652,,"Cross-site scripting (XSS) vulnerability in Sun iPlanet Messaging Server Messenger Express allows remote attackers to inject arbitrary web script via the expression Cascading Style Sheets (CSS) function, as demonstrated by setting the width style for an IMG element. NOTE: this issue might be related to CVE-2006-5486, however due to the vagueness of the initial advisory and different researchers, it has been assigned a new CVE.",Oracle,Iplanet Messaging Server Messenger Express,,,0.006819999776780605,false,false,false,false,,false,false,2006-11-03T00:00:00.000Z,0 CVE-2006-5486,https://securityvulnerability.io/vulnerability/CVE-2006-5486,,Cross-site scripting (XSS) vulnerability in Webmail in Sun Java System Messaging Server 6.0 through 6.2 and iPlanet Messaging Server 5.2 allows remote attackers to execute arbitrary Javascript via crafted messages.,Oracle,"Java System Messaging Server,Iplanet Messaging Server",,,0.0067900000140070915,false,false,false,false,,false,false,2006-10-24T22:00:00.000Z,0 CVE-2006-3159,https://securityvulnerability.io/vulnerability/CVE-2006-3159,,"pipe_master in Sun ONE/iPlanet Messaging Server 5.2 HotFix 1.16 (built May 14 2003) allows local users to read portions of restricted files via a symlink attack on msg.conf in a directory identified by the CONFIGROOT environment variable, which returns the first line of the file in an error message.",Oracle,"Iplanet Messaging Server,One Messaging Server",,,0.0004400000034365803,false,false,false,false,,false,false,2006-06-22T22:00:00.000Z,0 CVE-2005-2022,https://securityvulnerability.io/vulnerability/CVE-2005-2022,,"Unknown vulnerability in Webmail in iPlanet Messaging Server 5.2 Patch 1 and Sun ONE Messaging Server 6.2 allows remote attackers to execute arbitrary Javascript, possibly due to a cross-site scripting (XSS) vulnerability.",Oracle,"Iplanet Messaging Server,One Messaging Server",,,0.0017000000225380063,false,false,false,false,,false,false,2005-06-17T04:00:00.000Z,0