Extremail 1.5.9 does not check passwords correctly when they are all digits or begin with a digit, which allows remote attackers to gain privileges.
- http://www.securityfocus.com/bid/9754
No PoCs found on GitHub currently.