Vulnerability record · CVE-2005-4557 · published 28 December 2005

CVE-2005-4557: Deerfield visnetic mail server vulnerability

Deerfield · Visnetic Mail Server

dir/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, allows remote attackers to include arbitrary local files via a null byte (%00) in the lang parameter, possibly due to a directory traversal vulnerability.

5.0 CVSS 2.0 Medium EPSS 9.5% · top 4.7%

5.0CVSS 2.0 base score

9.5%EPSS exploitation probability, 30 days

NoNot in CISA KEV

3Affected product versions listed by NVD

18References, 6 tagged exploit

16 Jun 2026Last modified by NVD

Description

AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected products

3 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Visnetic Mail Server Deerfield

Web Mail Icewarp

Mail Server Merak

References

Link	Tags
http://marc.info/?l=full-disclosure&m=113570229524828&w=2
http://secunia.com/advisories/17046	ExploitPatchVendor Advisory
http://secunia.com/advisories/17865
http://secunia.com/secunia_research/2005-62/advisory/	ExploitVendor Advisory
http://securitytracker.com/id?1015412
http://www.osvdb.org/22079
http://www.securityfocus.com/archive/1/420255/100/0/threaded
http://www.securityfocus.com/bid/16069	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/23897
http://marc.info/?l=full-disclosure&m=113570229524828&w=2
http://secunia.com/advisories/17046	ExploitPatchVendor Advisory
http://secunia.com/advisories/17865
http://secunia.com/secunia_research/2005-62/advisory/	ExploitVendor Advisory
http://securitytracker.com/id?1015412
http://www.osvdb.org/22079
http://www.securityfocus.com/archive/1/420255/100/0/threaded
http://www.securityfocus.com/bid/16069	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/23897

Track CVE-2005-4557 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2005-4556Deerfield visnetic mail server vulnerabilityPHP remote file include vulnerability in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, …EPSS 11%28 Dec 2005 7.5CVE-2004-1672Icewarp web mail vulnerabilityattachment.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to view other users' attac…EPSS 1.7%12 Oct 2004 7.5CVE-2004-1673Icewarp web mail vulnerabilityaccountsettings_add.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allow remote attackers to create text fil…EPSS 1.7%12 Oct 2004 7.5CVE-2004-1674Icewarp web mail vulnerabilityviewaction.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to (1) delete arbitrary fi…EPSS 1.5%12 Oct 2004 7.5CVE-2004-1670Icewarp web mail vulnerabilityMultiple directory traversal vulnerabilities Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7, and possibly other versions, allow remote attackers…EPSS 1.8%10 Sep 2004 7.5CVE-2004-1722Merak mail server vulnerabilitySQL injection vulnerability in calendar.html in Merak Mail Server 5.2.7 allows remote attackers to execute arbitrary SQL statements via the schedule …EPSS 2.7%17 Aug 2004 7.5CVE-2002-0258Icewarp web mail vulnerabilityMerak Mail IceWarp Web Mail uses a static identifier as a user session ID that does not change across sessions, which could allow remote attackers wi…EPSS 1.4%29 May 2002 7.2CVE-2005-0322Icewarp web mail vulnerabilityMERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 and Mail Server 7.6.4r with Icewarp Mail Server 5.3.2 uses weak encryption in the (1) users.cfg, …EPSS 0.24%2 May 2005

Source: NIST National Vulnerability Database (record CVE-2005-4557), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.