Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

netwin surgemail 3.0a vulnerabilities and exploits

(subscribe to this query)
755
VMScore
CVE-2008-1055
Format string vulnerability in webmail.exe in NetWin SurgeMail 38k4 and previous versions and beta 39a, and WebMail 3.1s and previous versions, allows remote malicious users to cause a denial of service (daemon crash) and possibly execute arbitrary code via format string specifie...
Netwin Surgemail 1.8dNetwin Surgemail 1.8eNetwin Surgemail 2.0g2Netwin Surgemail 2.1aNetwin Surgemail 3.0aNetwin Surgemail 3.0c2Netwin Surgemail 1.8g3Netwin Surgemail 1.9Netwin Surgemail 2.1c7Netwin Surgemail 2.2a6Netwin Surgemail 3.8f3Netwin Surgemail 39aNetwin Surgemail 1.9b2Netwin Surgemail 2.0a2Netwin Surgemail 2.2c10Netwin Surgemail 2.2c9Netwin Surgemail Beta 39aNetwin SurgemailNetwin Surgemail 1.8aNetwin Surgemail 1.8b3Netwin Surgemail 2.0cNetwin Surgemail 2.0e
645
VMScore
CVE-2008-1054
Stack-based buffer overflow in the _lib_spawn_user_getpid function in (1) swatch.exe and (2) surgemail.exe in NetWin SurgeMail 38k4 and previous versions, and beta 39a, allows remote malicious users to cause a denial of service (daemon crash) and possibly execute arbitrary code v...
Netwin Surgemail 1.8g3Netwin Surgemail 1.9Netwin Surgemail 1.9b2Netwin Surgemail 2.2a6Netwin Surgemail 2.2c10Netwin Surgemail 3.8f3Netwin Surgemail 3.8iNetwin Surgemail 2.0a2Netwin Surgemail 2.0cNetwin Surgemail 2.2c9Netwin Surgemail 2.2g2Netwin Surgemail 3.8i2Netwin Surgemail 3.8i3Netwin Surgemail 1.8aNetwin Surgemail 1.8b3Netwin Surgemail 2.0eNetwin Surgemail 2.0g2Netwin Surgemail 2.2g3Netwin Surgemail 3.0aNetwin Surgemail 38kNetwin Surgemail 38k4Netwin Surgemail 1.8d
801
VMScore
CVE-2008-1497
Stack-based buffer overflow in the IMAP service in NetWin SurgeMail 38k4-4 and previous versions allows remote authenticated users to execute arbitrary code via long arguments to the LSUB command.
Netwin Surgemail 2.0g2Netwin Surgemail 2.1c7Netwin Surgemail 3.2eNetwin Surgemail 3.5aNetwin Surgemail 3.7b5Netwin Surgemail 3.7b6Netwin Surgemail 1.8g3Netwin Surgemail 2.2a6Netwin Surgemail 2.2c10Netwin Surgemail 3.5b3Netwin Surgemail 3.6dNetwin Surgemail 3.7b7Netwin Surgemail 3.7b8Netwin Surgemail 3.8iNetwin Surgemail 3.8i2Netwin Surgemail 1.9b2Netwin Surgemail 2.0a2Netwin Surgemail 2.2g2Netwin Surgemail 2.2g3Netwin Surgemail 3.6f3Netwin Surgemail 3.6f5Netwin Surgemail 3.6f7
435
VMScore
CVE-2010-3201
Cross-site scripting (XSS) vulnerability in NetWin Surgemail prior to 4.3g allows remote malicious users to inject arbitrary web script or HTML via the username_ex parameter to the surgeweb program.
Netwin Surgemail 1.3aNetwin Surgemail 1.3a Rc1Netwin Surgemail 1.0dNetwin Surgemail 1.1aNetwin Surgemail 1.5aNetwin Surgemail 1.6bNetwin Surgemail 1.3hNetwin Surgemail 1.4cNetwin Surgemail 1.9Netwin Surgemail 1.9b2Netwin Surgemail 1.7b3Netwin Surgemail 1.8aNetwin Surgemail 2.1c7Netwin Surgemail 3.0c2Netwin Surgemail 2.2g2Netwin Surgemail 3.0aNetwin Surgemail 3.9aNetwin Surgemail 3.8uNetwin Surgemail 3.1sNetwin Surgemail 3.8aNetwin Surgemail 1.3fNetwin Surgemail 1.3g
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
HTML injectionCVE-2024-35894SQLCVE-2024-5105CVE-2014-100005CVE-2024-35895unauthorizedCVE-2024-22120CVE-2024-35890
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook