Hmailserver

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Hmailserver records in CISA KEV

No Hmailserver vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Hmailserver 5 records MEDIUM

Records

5 records

TI-2025-32547 CVE-2025-52372 · GHSA-39qh-9h7v-m3w8

An issue in hMailServer v.5.8.6 allows a local attacker to obtain sensitive information…

MEDIUM 56

An issue in hMailServer v.5.8.6 allows a local attacker to obtain sensitive information via the hmailserver/installation/hMailServerInnoExtension.iss and hMailServer.ini components.

CVSS 3.1MEDIUM 5.1 Local No auth No interaction EPSS 0.00268 Published 2025-07-21 No fix listed CWE-200

TI-2025-32549 CVE-2025-52374 · GHSA-q363-f26m-jj5j

Use of hardcoded cryptographic key in Encryption.cs in hMailServer 5.8.6 and 5.6.9-beta…

MEDIUM 54

Use of hardcoded cryptographic key in Encryption.cs in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords to other servers from hMailAdmin.exe.config file to access other hMailServer admin consoles wit…

CVSS 3.1MEDIUM 4.6 Network Low privileges User interaction EPSS 0.00232 Published 2025-07-21 No fix listed CWE-321

TI-2025-32548 CVE-2025-52373 · GHSA-244x-c938-j3qj

Use of hardcoded cryptographic key in BlowFish.cpp in hMailServer 5.8.6 and 5.6.9-beta…

MEDIUM 54

Use of hardcoded cryptographic key in BlowFish.cpp in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords used in database connections from hMailServer.ini config file.

CVSS 3.1MEDIUM 4.6 Network Low privileges User interaction EPSS 0.00357 Published 2025-07-21 No fix listed CWE-321

TI-2013-04764 CVE-2013-5571 · GHSA-4h2c-7653-598f

HMailServer 5.3.x and prior: Memory Corruption which could cause DOS

LOW 28

HMailServer 5.3.x and prior: Memory Corruption which could cause DOS

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00886 Published 2020-01-07 No fix listed CWE-119

TI-2008-03520 CVE-2008-3676 · GHSA-82xr-fmv3-39p4

Unspecified vulnerability in the IMAP server in hMailServer 4.4.1 allows remote…

LOW 25

Unspecified vulnerability in the IMAP server in hMailServer 4.4.1 allows remote authenticated users to cause a denial of service (resource exhaustion or daemon crash) via a long series of IMAP commands.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02755 Published 2008-08-14 No fix listed CWE-20

Open these records in search →

Critical	0
High	0
Medium	5
Low	0
No CVSS	0