NGSSoftware Insight Security Research Advisory #NISR07052003B – SLWebMail 3 is vulnerable to various buffer overflows in many of its ISAPI DLL applications including showlogin.dll, recman.dll, admin.dll, and globallogin.dll. It is also vulnerable to arbitrary file access via ShowGodLog.dll which does not even force authentication prior to use. Physical paths can also be determined by making invalid requests to certain DLLs.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/31112/SLWebmail.txt
Source: https://packetstormsecurity.com/files/31112/SLWebmail.txt.html