Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
mailenable mailenable vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2015-9279
MailEnable prior to 8.60 allows Stored XSS via malformed use of "<img/src" with no ">" character in the body of an e-mail message.
Mailenable Mailenable
5
CVSSv2
CVE-2015-9280
MailEnable prior to 8.60 allows XXE via an XML document in the request.aspx Options parameter.
Mailenable Mailenable
7.8
CVSSv2
CVE-2007-0955
The NTLM_UnPack_Type3 function in MENTLM.dll in MailEnable Professional 2.35 and previous versions allows remote malicious users to cause a denial of service (application crash) via certain base64-encoded data following an AUTHENTICATE NTLM command to the imap port (143/tcp), whi...
Mailenable Mailenable
2 EDB exploits
6.8
CVSSv2
CVE-2006-6291
Stack overflow in the IMAP module (MEIMAPS.EXE) in MailEnable Professional 1.6 up to and including 1.83 and 2.0 up to and including 2.33, and MailEnable Enterprise 1.1 up to and including 1.40 and 2.0 up to and including 2.33, allows remote authenticated users to cause a denial o...
Mailenable Mailenable
5
CVSSv2
CVE-2015-9278
MailEnable prior to 8.60 allows Privilege Escalation because admin accounts could be created as a consequence of %0A mishandling in AUTH.TAB after a password-change request.
Mailenable Mailenable
5
CVSSv2
CVE-2019-12924
MailEnable Enterprise Premium 10.23 was vulnerable to XML External Entity Injection (XXE) attacks that could be exploited by an unauthenticated user. It was possible for an malicious user to use a vulnerability in the configuration of the XML processor to read any file on the hos...
Mailenable Mailenable
4.3
CVSSv2
CVE-2019-12923
In MailEnable Enterprise Premium 10.23, the potential cross-site request forgery (CSRF) protection mechanism was not implemented correctly and it was possible to bypass it by removing the anti-CSRF token parameter from the request. This could allow an malicious user to manipulate...
Mailenable Mailenable
6.5
CVSSv2
CVE-2019-12925
MailEnable Enterprise Premium 10.23 was vulnerable to multiple directory traversal issues, with which authenticated users could add, remove, or potentially read files in arbitrary folders accessible by the IIS user. This could lead to reading other users' credentials includi...
Mailenable Mailenable
6.5
CVSSv2
CVE-2019-12926
MailEnable Enterprise Premium 10.23 did not use appropriate access control checks in a number of areas. As a result, it was possible to perform a number of actions, when logged in as a user, that that user should not have had permission to perform. It was also possible to gain ac...
Mailenable Mailenable
4.3
CVSSv2
CVE-2019-12927
MailEnable Enterprise Premium 10.23 was vulnerable to stored and reflected cross-site scripting (XSS) attacks. Because the session cookie did not use the HttpOnly flag, it was possible to hijack the session cookie by exploiting this vulnerability.
Mailenable Mailenable
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-22120
CVE-2024-35921
CVE-2024-35874
brute force
CVE-2024-36080
unprivileged
CVE-2024-35917
IDOR
CVE-2024-4947
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
NEXT »