PatchTheCVE: postmasterhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2005-1653: Cross-site scripting (XSS) vulnerability in message.htm for Woppoware PostMaster 4.2.2 (build 3.2.5) allows rehttps://patchthecve.com/cve/CVE-2005-1653.htmlhttps://patchthecve.com/cve/CVE-2005-1653.htmlTue, 16 Jun 2026 22:13:26 +0000MEDIUM 6.8: Cross-site scripting (XSS) vulnerability in message.htm for Woppoware PostMaster 4.2.2 (build 3.2.5) allows remote attackers to inject arbitrary web script or HTML via the email parameter.CVE-2005-1652: message.htm for Woppoware PostMaster 4.2.2 (build 3.2.5) allows remote attackers to bypass authentication by mhttps://patchthecve.com/cve/CVE-2005-1652.htmlhttps://patchthecve.com/cve/CVE-2005-1652.htmlTue, 16 Jun 2026 22:13:26 +0000HIGH 7.5: message.htm for Woppoware PostMaster 4.2.2 (build 3.2.5) allows remote attackers to bypass authentication by modifying the email parameter.CVE-2005-1651: Directory traversal vulnerability in message.htm for Woppoware PostMaster 4.2.2 (build 3.2.5) allows remote athttps://patchthecve.com/cve/CVE-2005-1651.htmlhttps://patchthecve.com/cve/CVE-2005-1651.htmlTue, 16 Jun 2026 22:13:26 +0000HIGH 7.5: Directory traversal vulnerability in message.htm for Woppoware PostMaster 4.2.2 (build 3.2.5) allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) in the wmm parameter.CVE-2005-1650: The web mail service in Woppoware PostMaster 4.2.2 (build 3.2.5) generates different error messages depending https://patchthecve.com/cve/CVE-2005-1650.htmlhttps://patchthecve.com/cve/CVE-2005-1650.htmlTue, 16 Jun 2026 22:13:26 +0000MEDIUM 5.0: The web mail service in Woppoware PostMaster 4.2.2 (build 3.2.5) generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames.CVE-2000-1153: PostMaster 1.0 in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a messagehttps://patchthecve.com/cve/CVE-2000-1153.htmlhttps://patchthecve.com/cve/CVE-2000-1153.htmlTue, 16 Jun 2026 21:53:16 +0000MEDIUM 5.0: PostMaster 1.0 in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL.