CVE-2001-0857

Cross-site scripting vulnerability in status.php3 in Imp Webmail 2.2.6 and earlier allows remote attackers to gain access to the e-mail of other users by hijacking session cookies via the message parameter.

Scoring

CVSS base score
0.52
EPSS probability
10.36%
Published
2002-03-09
Last modified
2026-03-16

Affected products

Markdown version · Browse all CVEs