Vulnerability Database

308,379

Total vulnerabilities in the database

CVE-2002-0738

MHonArc 2.5.2 and earlier does not properly filter Javascript from archived e-mail messages, which could allow remote attackers to execute script in web clients by (1) splitting the SCRIPT tag into smaller pieces, (2) including the script in a SRC argument to an IMG tag, or (3) using "&={script}" syntax.

Published: Aug 12, 2002
Updated: Nov 9, 2025
CVE: CVE-2002-0738
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
mhonarc / mhonarc	2.5.1	2.5.1.x
mhonarc / mhonarc	2.5.2	2.5.2.x
mhonarc / mhonarc	2.5	2.5.x

http://archives.neohapsis.com/archives/bugtraq/2002-04/0260.html
http://www.debian.org/security/2002/dsa-163
http://www.iss.net/security_center/static/8894.php
http://www.mhonarc.org/MHonArc/CHANGES
http://www.securityfocus.com/bid/4546

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo