Skip to content
OpenAdvisories
Unscored DSA-820-1 2 CVEs

courier - missing input sanitising

Published Sep 24, 2005 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 3.0 courier 0.37.3-2.7
Debian · 3.1 courier 0.47-4sarge3

Vulnerabilities 2

  • Unscored —
    CVE-2005-2769 Public exploit

    Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 and possibly other versions allows remote attackers to inje…

    courier Debian
  • Unscored —
    CVE-2005-2820

    Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 allows remote attackers to inject arbitrary web script or H…

    courier Debian