CVE

Id
4090  
CVE No.
CVE-2001-1286  
Status
Candidate  
Description
Ipswitch IMail 7.04 and earlier stores a user"s session ID in a URL, which could allow remote attackers to hijack sessions by obtaining the URL, e.g. via an HTML email that causes the Referrer to be sent to a URL under the attacker"s control.  
Phase
Proposed (20020502)  
Votes
ACCEPT(1) Green | MODIFY(1) Frech | NOOP(4) Cole, Cox, Foat, Wall  
Comments
Frech> XF:imail-mailbox-directory-traversal(7275)