Code-crafters

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Code-crafters records in CISA KEV

No Code-crafters vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ability Mail Server 4 records LOW Ability Server 2 records MEDIUM

Records

4 records in Ability Mail Server · all components

TI-2004-02365 CVE-2004-2495 · GHSA-pcpj-8874-w5qg

The (1) Webmail, (2) admin, and (3) SMTP services in Ability Mail Server 1.18 allow…

LOW 38

The (1) Webmail, (2) admin, and (3) SMTP services in Ability Mail Server 1.18 allow remote attackers to cause a denial of service (CPU consumption) via a large number of simultaneous connections to the service.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.0203 Published 2005-10-25 No fix listed

TI-2009-03284 CVE-2009-3445 · GHSA-cf72-mxxr-2628

Unspecified vulnerability in Code-Crafters Ability Mail Server before 2.70 allows remote…

LOW 27

Unspecified vulnerability in Code-Crafters Ability Mail Server before 2.70 allows remote attackers to cause a denial of service (daemon crash) via an IMAP4 FETCH command.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02152 Published 2009-09-28 No fix listed

TI-2013-05184 CVE-2013-6162 · GHSA-6452-g67q-8rc3

Cross-site scripting (XSS) vulnerability in Code-Crafters Ability Mail Server 3.1.1…

LOW 23

Cross-site scripting (XSS) vulnerability in Code-Crafters Ability Mail Server 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the body of an email.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01344 Published 2013-12-21 No fix listed CWE-79

TI-2007-05823 CVE-2007-6101 · GHSA-fg8v-97qx-694j

Ability Mail Server before 2.61 allows remote authenticated users to cause a denial of…

LOW 22

Ability Mail Server before 2.61 allows remote authenticated users to cause a denial of service (daemon crash) via (1) malformed number list ranges in unspecified IMAP commands, and possibly (2) a blank string in unspecif…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.01351 Published 2007-11-23 No fix listed CWE-20

Open these records in search →

Critical	0
High	2
Medium	4
Low	0
No CVSS	0