CVE:CVE-2005-0321
CNNVD:CNNVD-200505-340
MERAK Mail Server 7.6.0以及Icewarp Web Mail 5.3.0允许远程验证用户通过对(1)calendar_d.html，(2)calendar_m.html，(3)calendar_w.html或(4) calendar_y.html的HTTP请求来获取敏感信息，从而透露安装路径。
solution:Upgrade icewarp web_mail to a higher version than 5.3.0,and avoid the version 5.3.0; Upgrade merak mail_server to a higher version than 7.6.0,and avoid the version 7.6.0