Skip to content
OpenAdvisories
Unscored DSA-436 3 CVEs

mailman - several vulnerabilities

Published Feb 8, 2004 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 3.0 mailman 2.0.11-1woody7

Vulnerabilities 3

  • Medium —
    CVE-2003-0038 Public exploit

    Mailman Cross-site scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in options.py for Mailman 2.1 allows remote attackers to inject script or HTML into web pages via the (1) email or (2) language parameters.

    mailman PyPI
  • Unscored —
    CVE-2003-0965

    Cross-site scripting (XSS) vulnerability in the admin CGI script for Mailman before 2.1.4 allows remote attackers to st…

  • Unscored —
    CVE-2003-0991

    Unknown vulnerability in the mail command handler in Mailman before 2.0.14 allows remote attackers to cause a denial of…