CVE-2006-2974

no score yetEPSS 1.9%

Multiple cross-site scripting (XSS) vulnerabilities in EmailArchitect Email Server 6.1.0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) errCode and (2) uid parameter in (a) default.asp and (3) dname parameter in (b) /admin/dns.asp and (c) /additional/regdomain_done.asp.

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
Published: 2006-06-12
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

emailarchitect:email_server

References

http://secunia.com/advisories/20516
http://securitytracker.com/id?1016237
http://www.vupen.com/english/advisories/2006/2213
https://exchange.xforce.ibmcloud.com/vulnerabilities/27005
http://secunia.com/advisories/20516

Check your stack JSON