CVE-2001-0857
imp webmail: no CVSS score yet. EPSS 7.9% chance of exploitation in the next 30 days.
Cross-site scripting vulnerability in status.php3 in Imp Webmail 2.2.6 and earlier allows remote attackers to gain access to the e-mail of other users by hijacking session cookies via the message parameter.
- EPSS
- 7.9% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- imp:webmail