https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T19:50:11.824544+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2019-15071 CVE-2019-15071 — Openfind MAIL2000 Webmail Pre-Auth Cross-Site Scripting 2026-10-16T19:50:11.843311+00:00

Affected: Openfind MAIL2000

The "/cgi-bin/go" page in MAIL2000 through version 6.0 and 7.0 has a cross-site scripting (XSS) vulnerability, allowing execution of arbitrary code via ACTION parameter without authentication. The code can executed for any user accessing the page. This vulnerability affects many mail system of governments, organizations, companies and universities.