Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

netwin surgemail 1.9b2 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2004-2548
Multiple cross-site scripting (XSS) vulnerabilities in NetWin (1) SurgeMail prior to 2.0c and (2) WebMail allow remote malicious users to inject arbitrary web script or HTML via (a) a URI containing the script, or (b) the username field in the login form. NOTE: it is possible tha...
Netwin Surgemail 1.9Netwin Surgemail 1.9b2Netwin Surgemail 1.8b3Netwin Surgemail 1.8dNetwin Surgemail 1.8fNetwin Surgemail 1.8g3Netwin Surgemail 1.8aNetwin Webmail 3.1dNetwin Surgemail
NA
CVE-2004-2537
Unspecified vulnerability in SurgeMail prior to 2.2c10 has unknown impact and attack vectors, related to a "Webmail security bug."
Netwin Surgemail 1.9Netwin Surgemail 1.9b2Netwin Surgemail 1.8b3Netwin Surgemail 1.8dNetwin Surgemail 2.0eNetwin Surgemail 2.0g2Netwin Surgemail 2.1aNetwin Surgemail 1.8aNetwin Surgemail 2.0a2Netwin Surgemail 2.0cNetwin Surgemail 1.8fNetwin Surgemail 1.8g3Netwin Surgemail 2.1c7Netwin Surgemail 2.2a6
NA
CVE-2008-1055
Format string vulnerability in webmail.exe in NetWin SurgeMail 38k4 and previous versions and beta 39a, and WebMail 3.1s and previous versions, allows remote malicious users to cause a denial of service (daemon crash) and possibly execute arbitrary code via format string specifie...
Netwin Surgemail 1.8dNetwin Surgemail 1.8eNetwin Surgemail 2.0g2Netwin Surgemail 2.1aNetwin Surgemail 3.0aNetwin Surgemail 3.0c2Netwin Surgemail 1.8g3Netwin Surgemail 1.9Netwin Surgemail 2.1c7Netwin Surgemail 2.2a6Netwin Surgemail 3.8f3Netwin Surgemail 39aNetwin Surgemail 1.9b2Netwin Surgemail 2.0a2Netwin Surgemail 2.2c10Netwin Surgemail 2.2c9Netwin Surgemail Beta 39aNetwin SurgemailNetwin Surgemail 1.8aNetwin Surgemail 1.8b3Netwin Surgemail 2.0cNetwin Surgemail 2.0e
NA
CVE-2008-1054
Stack-based buffer overflow in the _lib_spawn_user_getpid function in (1) swatch.exe and (2) surgemail.exe in NetWin SurgeMail 38k4 and previous versions, and beta 39a, allows remote malicious users to cause a denial of service (daemon crash) and possibly execute arbitrary code v...
Netwin Surgemail 1.8g3Netwin Surgemail 1.9Netwin Surgemail 1.9b2Netwin Surgemail 2.2a6Netwin Surgemail 2.2c10Netwin Surgemail 3.8f3Netwin Surgemail 3.8iNetwin Surgemail 2.0a2Netwin Surgemail 2.0cNetwin Surgemail 2.2c9Netwin Surgemail 2.2g2Netwin Surgemail 3.8i2Netwin Surgemail 3.8i3Netwin Surgemail 1.8aNetwin Surgemail 1.8b3Netwin Surgemail 2.0eNetwin Surgemail 2.0g2Netwin Surgemail 2.2g3Netwin Surgemail 3.0aNetwin Surgemail 38kNetwin Surgemail 38k4Netwin Surgemail 1.8d
NA
CVE-2008-1497
Stack-based buffer overflow in the IMAP service in NetWin SurgeMail 38k4-4 and previous versions allows remote authenticated users to execute arbitrary code via long arguments to the LSUB command.
Netwin Surgemail 2.0g2Netwin Surgemail 2.1c7Netwin Surgemail 3.2eNetwin Surgemail 3.5aNetwin Surgemail 3.7b5Netwin Surgemail 3.7b6Netwin Surgemail 1.8g3Netwin Surgemail 2.2a6Netwin Surgemail 2.2c10Netwin Surgemail 3.5b3Netwin Surgemail 3.6dNetwin Surgemail 3.7b7Netwin Surgemail 3.7b8Netwin Surgemail 3.8iNetwin Surgemail 3.8i2Netwin Surgemail 1.9b2Netwin Surgemail 2.0a2Netwin Surgemail 2.2g2Netwin Surgemail 2.2g3Netwin Surgemail 3.6f3Netwin Surgemail 3.6f5Netwin Surgemail 3.6f7
NA
CVE-2004-2547
NetWin (1) SurgeMail prior to 2.0c and (2) WebMail allow remote malicious users to obtain sensitive information via HTTP requests that (a) specify the / URI, (b) specify the /scripts/ URI, or (c) specify a non-existent file, which reveal the path in an error message.
Netwin Surgemail 1.1aNetwin Surgemail 1.1bNetwin Surgemail 1.3a Rc1Netwin Surgemail 1.3bNetwin Surgemail 1.3jNetwin Surgemail 1.3kNetwin Surgemail 1.5cNetwin Surgemail 1.5dNetwin Surgemail 1.6e2Netwin Surgemail 1.7aNetwin Surgemail 2.0a2Netwin Webmail 3.1dNetwin Surgemail 1.2aNetwin Surgemail 1.2bNetwin Surgemail 1.3eNetwin Surgemail 1.3fNetwin Surgemail 1.3gNetwin Surgemail 1.4bNetwin Surgemail 1.4cNetwin Surgemail 1.6aNetwin Surgemail 1.6bNetwin Surgemail 1.8b3
NA
CVE-2010-3201
Cross-site scripting (XSS) vulnerability in NetWin Surgemail prior to 4.3g allows remote malicious users to inject arbitrary web script or HTML via the username_ex parameter to the surgeweb program.
Netwin Surgemail 1.3aNetwin Surgemail 1.3a Rc1Netwin Surgemail 1.0dNetwin Surgemail 1.1aNetwin Surgemail 1.5aNetwin Surgemail 1.6bNetwin Surgemail 1.3hNetwin Surgemail 1.4cNetwin Surgemail 1.9Netwin Surgemail 1.9b2Netwin Surgemail 1.7b3Netwin Surgemail 1.8aNetwin Surgemail 2.1c7Netwin Surgemail 3.0c2Netwin Surgemail 2.2g2Netwin Surgemail 3.0aNetwin Surgemail 3.9aNetwin Surgemail 3.8uNetwin Surgemail 3.1sNetwin Surgemail 3.8aNetwin Surgemail 1.3fNetwin Surgemail 1.3g
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4671unauthorizedCVE-2024-4776CVE-2024-3407CVE-2024-26026CVE-2024-32888wirelessCVE-2024-4656template injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook