This page aggregates publicly disclosed CVE and security risk information related to imp, with CVSS, EPSS, publication dates, and vulnerability intelligence data to help assess potential risk and remediation priority.
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2001-0857 | Cross-site scripting vulnerability in status.php3 in Imp Webmail 2.2.6 and earlier allows remote attackers to gain access to the e-mail of other users by hijacking session cookies via the message parameter. | [email protected] | 7.5 | 3.49% | 2001-12-06 | 2026-06-16 |
| CVE-2000-0459 | IMP does not remove files properly if the MSWordView application quits, which allows local users to cause a denial of service by filling up the disk space by requesting a large number of documents and prematurely stopping the request. | [email protected] | 5.0 | 1.01% | 2000-04-22 | 2026-06-16 |
| CVE-2000-0458 | The MSWordView application in IMP creates world-readable files in the /tmp directory, which allows other local users to read potentially sensitive information. | [email protected] | 2.1 | 0.33% | 2000-04-22 | 2026-06-16 |