Advisories · Technology

Icewarp Mail Server.

Every CVE that names Icewarp Mail Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-40632 CVE record

CVSS 2.0 Low

Cross-site scripting (XSS) vulnerability in IceWarp Mail Server
- Icewarp Mail Server
- Cross-site scripting (XSS)
Not analysed yet 16 May 2025
CVE-2025-40631 CVE record

CVSS 2.0 Low

HTTP host header injection vulnerability in IceWarp Mail Server
- Icewarp Mail Server
- CWE-644
Not analysed yet 16 May 2025
CVE-2025-40630 CVE record

CVSS 5.1 Medium

Open redirection vulnerability in IceWarp Mail Server
- Icewarp Mail Server
- Open redirect
Not analysed yet 16 May 2025