← Database

CVE-2007-0617

MEDIUM CVSS: 6.8 Published: 2007-01-31 Modified: 2026-06-16

Description

The SpamBlocker.dll ActiveX control in Earthlink TotalAccess is marked "safe for scripting," which allows remote attackers to add arbitrary e-mail addresses and domains to the spam blocker whitelist via the (1) AddSenderToWhitelist and (2) AddDomainToWhitelist functions.

Affected Platforms

Earthlink Total Access

Weakness Type

NVD-CWE-Other

References