Vulnerability Database

308,379

Total vulnerabilities in the database

CVE-2002-2165

The IMHO Webmail module 0.97.3 and earlier for Roxen leaks the REFERER from the browser's previous login session in an error page, which allows local users to read another user's inbox.

  • Published: Dec 31, 2002
  • Updated: Nov 9, 2025
  • CVE: CVE-2002-2165
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 2.1
  • AV:L/AC:L/Au:N/C:P/I:N/A:N

No CWE or OWASP classifications available.

Software From Fixed in
imho / imho_webmail 0.98 0.98.x
imho / imho_webmail 0.96.2 0.96.2.x
imho / imho_webmail 0.98.2 0.98.2.x
imho / imho_webmail 0.97.1 0.97.1.x
imho / imho_webmail 0.96.1 0.96.1.x
imho / imho_webmail 0.98.3 0.98.3.x
imho / imho_webmail 0.96.3 0.96.3.x
imho / imho_webmail 0.97 0.97.x
imho / imho_webmail 0.96 0.96.x