CVE-2004-1674: viewaction.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows r...

Security readout for executives and security teams

This old webmail vulnerability could let a remote attacker delete or move files through Merak Mail Server with Icewarp Web Mail. For an exposed legacy mail system, the business risk is loss of mail availability or integrity. The source bundle does not confirm active exploitation or a vendor fix. Exposure is most likely where legacy Merak Mail Server 7.4.5 and Icewarp Web Mail 5.2.7 remain reachable, especially internet-facing webmail. The bundle says possibly other versions, but gives no confirmed affected-version range or CPEs. Prioritize remediation if this software is still internet-facing or business-critical. The issue is old, but legacy mail systems often remain exposed and unsupported. Lack of active-exploitation evidence lowers immediacy, not the need to remove exposure. Mitigation focus: Inventory Merak and Icewarp Web Mail deployments and confirm versions.; Check vendor or trusted advisory guidance for fixed versions or supported upgrade paths.; Restrict webmail access to trusted networks or VPN where business permits..

Prepared

Jun 30, 2026, 00:10 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.