Winmail Mail Server Information Disclosure

Summary
The remote host is running Winmail Server. Winmail Server is an enterprise class mail server software system offering a robust feature set, including extensive security measures. Winmail Server supports SMTP, POP3, IMAP, Webmail, LDAP, multiple domains, SMTP authentication, spam protection, anti-virus protection, SSL/TLS security, Network Storage, remote access, Web-based administration, and a wide array of standard email options such as filtering, signatures, real-time monitoring, archiving, and public email folders. Three scripts that come with the program (chgpwd.php, domain.php and user.php) allow a remote attacker to disclose sensitive information about the remote host.
Solution
Upgrade to the latest version of this software