Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
mailenable mailenable enterprise vulnerabilities and exploits
(subscribe to this query)
8.1
CVSSv3
CVE-2019-12925
MailEnable Enterprise Premium 10.23 was vulnerable to multiple directory traversal issues, with which authenticated users could add, remove, or potentially read files in arbitrary folders accessible by the IIS user. This could lead to reading other users' credentials includi...
Mailenable Mailenable
8.8
CVSSv3
CVE-2019-12926
MailEnable Enterprise Premium 10.23 did not use appropriate access control checks in a number of areas. As a result, it was possible to perform a number of actions, when logged in as a user, that that user should not have had permission to perform. It was also possible to gain ac...
Mailenable Mailenable
6.1
CVSSv3
CVE-2019-12927
MailEnable Enterprise Premium 10.23 was vulnerable to stored and reflected cross-site scripting (XSS) attacks. Because the session cookie did not use the HttpOnly flag, it was possible to hijack the session cookie by exploiting this vulnerability.
Mailenable Mailenable
6.5
CVSSv3
CVE-2019-12923
In MailEnable Enterprise Premium 10.23, the potential cross-site request forgery (CSRF) protection mechanism was not implemented correctly and it was possible to bypass it by removing the anti-CSRF token parameter from the request. This could allow an malicious user to manipulate...
Mailenable Mailenable
9.8
CVSSv3
CVE-2019-12924
MailEnable Enterprise Premium 10.23 was vulnerable to XML External Entity Injection (XXE) attacks that could be exploited by an unauthenticated user. It was possible for an malicious user to use a vulnerability in the configuration of the XML processor to read any file on the hos...
Mailenable Mailenable
NA
CVE-2012-2588
Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Enterprise 6.5 allow remote malicious users to inject arbitrary web script or HTML via the (1) From, (2) To, or (3) Subject header or (4) body in an SMTP e-mail message.
Mailenable Mailenable 6.5
1 EDB exploit
NA
CVE-2012-0389
Cross-site scripting (XSS) vulnerability in ForgottenPassword.aspx in MailEnable Professional, Enterprise, and Premium 4.26 and previous versions, 5.x prior to 5.53, and 6.x prior to 6.03 allows remote malicious users to inject arbitrary web script or HTML via the Username parame...
Mailenable Mailenable 3.52
Mailenable Mailenable 3.12
Mailenable Mailenable 3.11
Mailenable Mailenable 3.61
Mailenable Mailenable 1.73
Mailenable Mailenable 3.0
Mailenable Mailenable 3.01
Mailenable Mailenable 4.11
Mailenable Mailenable 1.52
Mailenable Mailenable 1.53
Mailenable Mailenable 1.71
Mailenable Mailenable 1.72
Mailenable Mailenable 4.24
Mailenable Mailenable 4.15
Mailenable Mailenable 1.79
Mailenable Mailenable 3.53
Mailenable Mailenable 1.75
Mailenable Mailenable 1.76
Mailenable Mailenable 3.6
Mailenable Mailenable 1.74
Mailenable Mailenable 4.1
Mailenable Mailenable 4.13
2 EDB exploits
NA
CVE-2008-3449
MailEnable Professional 3.5.2 and Enterprise 3.52 allow remote malicious users to cause a denial of service (crash) via multiple IMAP connection requests to the same folder.
Mailenable Mailenable 3.52
NA
CVE-2008-1275
Multiple unspecified vulnerabilities in the SMTP service in MailEnable Standard Edition 1.x, Professional Edition 3.x and previous versions, and Enterprise Edition 3.x and previous versions allow remote malicious users to cause a denial of service (crash) via crafted (1) EXPN or ...
Mailenable Mailenable Standard
Mailenable Mailenable Enterprise
Mailenable Mailenable Professional
1 EDB exploit
NA
CVE-2008-1276
Multiple buffer overflows in the IMAP service (MEIMAPS.EXE) in MailEnable Professional Edition and Enterprise Edition 3.13 and previous versions allow remote authenticated malicious users to execute arbitrary code via long arguments to the (1) FETCH, (2) EXAMINE, and (3) UNSUBSCR...
Mailenable Mailenable Professional
Mailenable Mailenable Enterprise
1 EDB exploit
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-33572
CVE-2024-24919
CVE-2024-0230
CVE-2024-32714
HTML injection
local file inclusion
CVE-2024-31098
CVE-2024-31244
privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
5
NEXT »