Vulnerabilities (CVE)

Vendor filter

Mailenable Subscribe

Filter

54 total CVE
CVE Vendors Products Updated CVSS
CVE-2019-12927 1 Mailenable 1 Mailenable 2019-07-23 4.3
MailEnable Enterprise Premium 10.23 was vulnerable to stored and reflected cross-site scripting (XSS) attacks. Because the session cookie did not use the HttpOnly flag, it was possible to hijack the session cookie by exploiting this vulnerability.
CVE-2015-9278 1 Mailenable 1 Mailenable 2019-02-01 5.0
MailEnable before 8.60 allows Privilege Escalation because admin accounts could be created as a consequence of %0A mishandling in AUTH.TAB after a password-change request.
CVE-2015-9280 1 Mailenable 1 Mailenable 2019-01-17 5.0
MailEnable before 8.60 allows XXE via an XML document in the request.aspx Options parameter.
CVE-2015-9277 1 Mailenable 1 Mailenable 2019-01-17 7.5
MailEnable before 8.60 allows Directory Traversal for reading the messages of other users, uploading files, and deleting files because "/../" and "/.. /" are mishandled.
CVE-2015-9279 1 Mailenable 1 Mailenable 2019-01-17 4.3
MailEnable before 8.60 allows Stored XSS via malformed use of "<img/src" with no ">" character in the body of an e-mail message.
CVE-2005-3813 1 Mailenable 2 Mailenable Professional, Mailenable Enterprise 2018-10-19 4.0
IMAP service (meimaps.exe) of MailEnable Professional 1.7 and Enterprise 1.1 allows remote authenticated attackers to cause a denial of service (application crash) by using RENAME with a non-existent mailbox, a different vulnerability than CVE-2005-3690.
CVE-2006-3277 1 Mailenable 2 Mailenable Professional, Mailenable Enterprise 2018-10-18 5.0
The SMTP service of MailEnable Standard 1.92 and earlier, Professional 2.0 and earlier, and Enterprise 2.0 and earlier before the MESMTPC hotfix, allows remote attackers to cause a denial of service (application crash) via a HELO command with a...
CVE-2006-6605 1 Mailenable 3 Mailenable Professional, Mailenable Standard, Mailenable Enterprise 2018-10-17 10.0
Stack-based buffer overflow in the POP service in MailEnable Standard 1.98 and earlier; Professional 1.84, and 2.35 and earlier; and Enterprise 1.41, and 2.35 and earlier before ME-10026 allows remote attackers to execute arbitrary code via a...
CVE-2006-6423 1 Mailenable 2 Mailenable Professional, Mailenable Enterprise 2018-10-17 10.0
Stack-based buffer overflow in the IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.35, Professional Edition 1.6 through 1.84, and Enterprise Edition 1.1 through 1.41 allows remote attackers to execute arbitrary code...
CVE-2006-6291 1 Mailenable 2 Mailenable Professional, Mailenable Enterprise 2018-10-17 6.8
Stack overflow in the IMAP module (MEIMAPS.EXE) in MailEnable Professional 1.6 through 1.83 and 2.0 through 2.33, and MailEnable Enterprise 1.1 through 1.40 and 2.0 through 2.33, allows remote authenticated users to cause a denial of service...
CVE-2006-6290 1 Mailenable 2 Mailenable Professional, Mailenable Enterprise 2018-10-17 6.5
Multiple stack-based buffer overflows in the IMAP module (MEIMAPS.EXE) in MailEnable Professional 1.6 through 1.82 and 2.0 through 2.33, and MailEnable Enterprise 1.1 through 1.30 and 2.0 through 2.33 allow remote authenticated users to cause a...
CVE-2007-0652 1 Mailenable 1 Mailenable Professional 2018-10-16 5.1
Cross-site request forgery (CSRF) vulnerability in MailEnable Professional before 2.37 allows remote attackers to modify arbitrary configurations and perform unauthorized actions as arbitrary users via a link or IMG tag.
CVE-2007-0651 1 Mailenable 1 Mailenable Professional 2018-10-16 4.3
Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Professional before 2.37 allow remote attackers to inject arbitrary Javascript script via (1) e-mail messages and (2) the ID parameter to (a) right.asp, (b) Forms/MAI/list.asp, and...
CVE-2008-1277 1 Mailenable 2 Mailenable Professional, Mailenable Enterprise 2018-10-11 9.0
The IMAP service (MEIMAPS.exe) in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allows remote attackers to cause a denial of service (crash) via (1) SEARCH and (2) APPEND commands without required arguments, which...
CVE-2008-1276 1 Mailenable 2 Mailenable Professional, Mailenable Enterprise 2018-10-11 9.0
Multiple buffer overflows in the IMAP service (MEIMAPS.EXE) in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allow remote authenticated attackers to execute arbitrary code via long arguments to the (1) FETCH, (2)...
CVE-2010-2580 1 Mailenable 1 Mailenable 2018-10-10 5.0
The SMTP service (MESMTPC.exe) in MailEnable 3.x and 4.25 does not properly perform a length check, which allows remote attackers to cause a denial of service (crash) via a long (1) email address in the MAIL FROM command, or (2) domain name in...
CVE-2007-1301 1 Mailenable 2 Mailenable Professional, Mailenable Enterprise 2017-10-11 9.0
Stack-based buffer overflow in the IMAP service in MailEnable Enterprise and Professional Editions 2.37 and earlier allows remote authenticated users to execute arbitrary code via a long argument to the APPEND command. NOTE: this is probably...
CVE-2008-1275 1 Mailenable 3 Mailenable Professional, Mailenable Standard, Mailenable Enterprise 2017-09-29 7.8
Multiple unspecified vulnerabilities in the SMTP service in MailEnable Standard Edition 1.x, Professional Edition 3.x and earlier, and Enterprise Edition 3.x and earlier allow remote attackers to cause a denial of service (crash) via crafted (1)...
CVE-2012-2588 1 Mailenable 1 Mailenable 2017-08-29 4.3
Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Enterprise 6.5 allow remote attackers to inject arbitrary web script or HTML via the (1) From, (2) To, or (3) Subject header or (4) body in an SMTP e-mail message.
CVE-2012-0389 1 Mailenable 1 Mailenable 2017-08-29 4.3
Cross-site scripting (XSS) vulnerability in ForgottenPassword.aspx in MailEnable Professional, Enterprise, and Premium 4.26 and earlier, 5.x before 5.53, and 6.x before 6.03 allows remote attackers to inject arbitrary web script or HTML via the...