Hastymail

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Hastymail records in CISA KEV

No Hastymail vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Hastymail2 4 records MEDIUM Hastymail 3 records LOW

Records

3 records in Hastymail · all components

TI-2006-05078 CVE-2006-5262 · GHSA-p8h5-3rhg-9c2x

CRLF injection vulnerability in lib/session.php in Hastymail 1.5 and earlier before…

LOW 34

CRLF injection vulnerability in lib/session.php in Hastymail 1.5 and earlier before 20061008 allows remote authenticated users to send arbitrary IMAP commands via a CRLF sequence in a mailbox name.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.02567 Published 2006-10-12 No fix listed

TI-2006-05126 CVE-2006-5313 · GHSA-qgqm-rhx5-mcpm

Hastymail 1.5 and earlier before 20061008 allows remote authenticated users to send…

LOW 32

Hastymail 1.5 and earlier before 20061008 allows remote authenticated users to send arbitrary SMTP commands by placing them after a CRLF.CRLF sequence in the smtp_message parameter.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01367 Published 2006-10-17 No fix listed CWE-20

TI-2004-02574 CVE-2004-2704 · GHSA-q953-qm86-wxwh

Hastymail 1.0.1 and earlier (stable) and 1.1 and earlier (development) does not send the…

LOW 28

Hastymail 1.0.1 and earlier (stable) and 1.1 and earlier (development) does not send the "attachment" parameter in the Content-Disposition field for attachments, which causes the attachment to be rendered inline by Inter…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0473 Published 2007-10-06 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	6
Low	0
No CVSS	0