SQL injection vulnerability in calendar.html in Merak Mail Server 5.2.7 allows remote attackers to execute arbitrary SQL statements via the schedule parameter.
https://exchange.xforce.ibmcloud.com/vulnerabilities/17022
https://euvd.enisa.europa.eu/vulnerability/EUVD-2004-1716
http://www.securityfocus.com/bid/10966
http://securitytracker.com/id?1010969
http://secunia.com/advisories/12269