mailenable mailenable professional 1.73 vulnerabilities and exploits

(subscribe to this query)

MailEnable Professional prior to 1.78 provides a cleartext user password when an administrator edits the user's settings, which allows remote authenticated administrators to obtain sensitive information by viewing the HTML source.

Mailenable Mailenable Professional 1.73 Mailenable Mailenable Professional 1.74 Mailenable Mailenable Professional 1.7 Mailenable Mailenable Professional 1.77 Mailenable Mailenable Professional 1.71 Mailenable Mailenable Professional 1.72 Mailenable Mailenable Professional 1.75 Mailenable Mailenable Professional 1.76

Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Professional prior to 2.37 allow remote malicious users to inject arbitrary Javascript script via (1) e-mail messages and (2) the ID parameter to (a) right.asp, (b) Forms/MAI/list.asp, and (c) Forms/VCF/list.asp in...

Mailenable Mailenable Professional 1.0.007 Mailenable Mailenable Professional 1.0.008 Mailenable Mailenable Professional 1.0.016 Mailenable Mailenable Professional 1.0.017 Mailenable Mailenable Professional 1.106 Mailenable Mailenable Professional 1.107 Mailenable Mailenable Professional 1.114 Mailenable Mailenable Professional 1.115 Mailenable Mailenable Professional 1.18 Mailenable Mailenable Professional 1.19 Mailenable Mailenable Professional 1.54 Mailenable Mailenable Professional 1.6 Mailenable Mailenable Professional 2.0 Mailenable Mailenable Professional 2.1 Mailenable Mailenable Professional 1.0.009 Mailenable Mailenable Professional 1.0.010 Mailenable Mailenable Professional 1.1 Mailenable Mailenable Professional 1.101 Mailenable Mailenable Professional 1.108 Mailenable Mailenable Professional 1.109 Mailenable Mailenable Professional 1.116 Mailenable Mailenable Professional 1.12

Cross-site request forgery (CSRF) vulnerability in MailEnable Professional prior to 2.37 allows remote malicious users to modify arbitrary configurations and perform unauthorized actions as arbitrary users via a link or IMG tag.

Mailenable Mailenable Professional 1.0.004 Mailenable Mailenable Professional 1.0.005 Mailenable Mailenable Professional 1.0.012 Mailenable Mailenable Professional 1.0.013 Mailenable Mailenable Professional 1.102 Mailenable Mailenable Professional 1.103 Mailenable Mailenable Professional 1.111 Mailenable Mailenable Professional 1.112 Mailenable Mailenable Professional 1.14 Mailenable Mailenable Professional 1.15 Mailenable Mailenable Professional 1.5 Mailenable Mailenable Professional 1.51 Mailenable Mailenable Professional 1.52 Mailenable Mailenable Professional 1.82 Mailenable Mailenable Professional 1.83 Mailenable Mailenable Professional 2.34 Mailenable Mailenable Professional 2.35 Mailenable Mailenable Professional 1.0.006 Mailenable Mailenable Professional 1.0.007 Mailenable Mailenable Professional 1.0.014 Mailenable Mailenable Professional 1.0.015 Mailenable Mailenable Professional 1.104

The SMTP service of MailEnable Standard 1.92 and previous versions, Professional 2.0 and previous versions, and Enterprise 2.0 and previous versions before the MESMTPC hotfix, allows remote malicious users to cause a denial of service (application crash) via a HELO command with a...

Mailenable Mailenable Professional 1.0.007 Mailenable Mailenable Professional 1.0.008 Mailenable Mailenable Professional 1.0.016 Mailenable Mailenable Professional 1.0.017 Mailenable Mailenable Professional 1.106 Mailenable Mailenable Professional 1.107 Mailenable Mailenable Professional 1.114 Mailenable Mailenable Professional 1.115 Mailenable Mailenable Professional 1.18 Mailenable Mailenable Professional 1.19 Mailenable Mailenable Professional 1.5018 Mailenable Mailenable Professional 1.51 Mailenable Mailenable Professional 1.701 Mailenable Mailenable Professional 1.702 Mailenable Mailenable Professional 1.91 Mailenable Mailenable Professional 1.92 Mailenable Mailenable Enterprise Mailenable Mailenable Professional 1.0.005 Mailenable Mailenable Professional 1.0.006 Mailenable Mailenable Professional 1.0.013 Mailenable Mailenable Professional 1.0.014 Mailenable Mailenable Professional 1.0.015

1 EDB exploit

Webmail in MailEnable Professional Edition prior to 1.73 and Enterprise Edition prior to 1.21 allows remote malicious users to cause a denial of service (CPU consumption) via unspecified vectors involving "incorrectly encoded quoted-printable emails".

Unspecified vulnerability in the POP service in MailEnable Standard Edition prior to 1.94, Professional Edition prior to 1.74, and Enterprise Edition prior to 1.22 has unknown attack vectors and impact related to "authentication exploits". NOTE: this is a different set ...

The IMAP service for MailEnable Professional and Enterprise Edition 2.0 up to and including 2.34, Professional Edition 1.6 up to and including 1.83, and Enterprise Edition 1.1 up to and including 1.40 allows remote malicious users to cause a denial of service (crash) via unspecif...

Buffer overflow in the POP 3 (POP3) service in MailEnable Standard Edition prior to 1.93, Professional Edition prior to 1.73, and Enterprise Edition prior to 1.21 allows remote malicious users to execute arbitrary code via unknown vectors before authentication.

Cross-site scripting (XSS) vulnerability in ForgottenPassword.aspx in MailEnable Professional, Enterprise, and Premium 4.26 and previous versions, 5.x prior to 5.53, and 6.x prior to 6.03 allows remote malicious users to inject arbitrary web script or HTML via the Username parame...

2 EDB exploits

Unspecified vulnerability in a cryptographic feature in MailEnable Standard Edition prior to 1.93, Professional Edition prior to 1.73, and Enterprise Edition prior to 1.21 leads to "weakened authentication security" with unknown impact and attack vectors. NOTE: due to l...

Mailenable Mailenable Enterprise 1.03 Mailenable Mailenable Enterprise 1.04 Mailenable Mailenable Enterprise 1.1 Mailenable Mailenable Enterprise 1.2 Mailenable Mailenable Standard 1.71 Mailenable Mailenable Standard 1.72 Mailenable Mailenable Enterprise 1.0 Mailenable Mailenable Enterprise 1.01 Mailenable Mailenable Standard 1.702 Mailenable Mailenable Standard 1.704 Mailenable Mailenable Enterprise 1.00 Mailenable Mailenable Enterprise 1.02 Mailenable Mailenable Standard 1.701 Mailenable Mailenable Standard 1.703

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook