Barracuda Networks

14 CVEs in 5 Barracuda Networks products, including Barracuda Spam Firewall, Barracuda Im Firewall, Barracuda Load Balancer.

Barracuda Networks products with known CVEs

ProductCVEs
Barracuda Spam Firewall14
Barracuda Im Firewall1
Barracuda Load Balancer1
Barracuda Message Archiver1
Barracuda Web Filter1
Barracuda Networks CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2008-10942008-12-19SQL injection vulnerability in index.cgi in the Account View page in Barracuda Spam Firewall (BSF) before 3.5.12.007 allows remote authenticated administrators…
CVE-2008-09712008-12-19Multiple cross-site scripting (XSS) vulnerabilities in index.cgi in Barracuda Spam Firewall (BSF) before 3.5.12.007, Message Archiver before 1.2.1.002, Web Fil…
CVE-2008-23332008-05-23Cross-site scripting (XSS) vulnerability in ldap_test.cgi in Barracuda Spam Firewall (BSF) before 3.5.11.025 allows remote attackers to inject arbitrary web sc…
CVE-2007-50582007-09-24Cross-site scripting (XSS) vulnerability in the Web administration interface in Barracuda Spam Firewall before firmware 3.5.10.016 allows remote attackers to i…
CVE-2007-16732007-05-09unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archiv…
CVE-2007-16692007-05-09zoo decoder 2.10 (zoo-2.10), as used in multiple products including (1) Barracuda Spam Firewall 3.4 and later with virusdef before 2.0.6399, (2) Spam Firewall…
CVE-2006-40822006-08-11Barracuda Spam Firewall (BSF), possibly 3.3.03.053, contains a hardcoded password for the admin account for logins from 127.0.0.1 (localhost), which allows loc…
CVE-2006-40812006-08-11preview_email.cgi in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 allows remote attackers to execute commands via shell metacharacters ("|" pipe…
CVE-2006-40012006-08-05Login.pm in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 contains a hard-coded password for the guest account, which allows remote attackers to…
CVE-2006-40002006-08-05Directory traversal vulnerability in cgi-bin/preview_email.cgi in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 allows remote authenticated users…
CVE-2005-28492005-09-08Argument injection vulnerability in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to (1) read portions of source code via…
CVE-2005-28482005-09-08Directory traversal vulnerability in img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to read arbitrary files via a…
CVE-2005-28472005-09-08img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to execute arbitrary commands via shell metacharacters in the f pa…
CVE-2005-04312005-05-02Barracuda Spam Firewall 3.1.10 and earlier does not restrict the domains that white-listed domains can send mail to, which allows members of white-listed domai…