Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to gain sensitive information via a direct request to (1) accountsettings_add.html or (2) topmenu.html.
https://exchange.xforce.ibmcloud.com/vulnerabilities/17315
https://euvd.enisa.europa.eu/vulnerability/EUVD-2004-1665
http://www.securityfocus.com/bid/11371