Atrium Mercur Mail Server 3.2 allows local attackers to read other user's email and create arbitrary files via a dot dot (..) attack.
Buffer overflow in the MERCUR WebView WebMail server allows remote attackers to cause a denial of service via a long mailuser parameter in the GET request.
Buffer overflow in POP3 and IMAP servers in the MERCUR mail server suite allows remote attackers to cause a denial of service.