← Vulnerability feed

Vulnerability record · CVE-2005-1657 · published 18 May 2005

CVE-2005-1657: Mercur messaging vulnerability

Mercur · Mercur Messaging

Multiple directory traversal vulnerabilities in Mercur Messaging 2005 SP2 allow remote attackers to perform unauthorized file operations via the Folder.Id parameter to (1) deletefolder.ctml, (2) deletemessage.ctml, (3) origmessage.ctml, or (4) readmessage.ctml, the Message.Id parameter to editmessage.ctml, or the (5) Message.Command parameter to messages.ctml.

7.5 CVSS 2.0 High EPSS 1.9% · top 21.1%
7.5CVSS 2.0 base score
1.9%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
14References
16 Jun 2026Last modified by NVD

Description

Multiple directory traversal vulnerabilities in Mercur Messaging 2005 SP2 allow remote attackers to perform unauthorized file operations via the Folder.Id parameter to (1) deletefolder.ctml, (2) deletemessage.ctml, (3) origmessage.ctml, or (4) readmessage.ctml, the Message.Id parameter to editmessage.ctml, or the (5) Message.Command parameter to messages.ctml.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/15234
http://www.osvdb.org/16220
http://www.osvdb.org/16221
http://www.osvdb.org/16222
http://www.osvdb.org/16223
http://www.osvdb.org/16224
http://www.osvdb.org/16225
http://secunia.com/advisories/15234
http://www.osvdb.org/16220
http://www.osvdb.org/16221
http://www.osvdb.org/16222
http://www.osvdb.org/16223
http://www.osvdb.org/16224
http://www.osvdb.org/16225

Track CVE-2005-1657 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2006-1255Mercur Messaging IMAP stack buffer overflow via LOGIN or SELECTMercur Messaging 5.0 SP3 and earlier contains a stack-based buffer overflow in its IMAP service, triggered by a long string passed to the LOGIN or SE…EPSS 69%analysed5.0CVE-2005-1656Mercur messaging vulnerabilityMercur Messaging 2005 SP2 allows remote attackers to read the source code of .ctml files via a URL with a trailing hex-encoded space ("%20").EPSS 1.3%

Source: NIST National Vulnerability Database (record CVE-2005-1657), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.