CVE-2005-1652: message.htm for Woppoware PostMaster 4.2.2 (build 3.2.5) allows remote attackers to bypass authentication b...

Security readout for executives and security teams

This CVE describes an authentication bypass in Woppoware PostMaster 4.2.2 build 3.2.5. A remote attacker may bypass login checks through the email parameter in message.htm. The public bundle does not provide CVSS, confirmed fixes, or current exploitation evidence. Exposure appears limited to organizations still running Woppoware PostMaster 4.2.2 build 3.2.5 with message.htm reachable by untrusted users. Treat as a legacy exposure review item. Prioritize quickly if PostMaster 4.2.2 build 3.2.5 is internet-facing or handles sensitive mail, because the reported impact is authentication bypass. Mitigation focus: Inventory for Woppoware PostMaster 4.2.2 build 3.2.5.; Restrict external access to PostMaster and message.htm where possible.; Check vendor and advisory guidance for a supported fix or replacement..

Prepared

Jun 29, 2026, 20:36 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.