CVE-2005-2160

CVE-2005-2160 describes a critical information disclosure vulnerability affecting Ipswitch IMail, where the application stores user credentials in cleartext within cookies. This allows remote attackers to easily obtain sensitive authentication data. The vulnerability carries a high CVSS score of 7.5 due to its network-based attack vector and low complexity, enabling full confidentiality impact without user interaction. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this nearly two-decade-old flaw.