Neomail

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Neomail records in CISA KEV

No Neomail vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Neomail 3 records LOW

Records

3 records in Neomail · all components

TI-2006-00690 CVE-2006-0711 · GHSA-j8r3-h5ph-8fcm

The (1) addfolder and (2) deletefolder functions in neomail-prefs.pl in NeoMail 1.28 do…

LOW 26

The (1) addfolder and (2) deletefolder functions in neomail-prefs.pl in NeoMail 1.28 do not validate the Session ID, which allows remote attackers to add and delete arbitrary files, when configured with homedirfolders an…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01487 Published 2006-02-15 No fix listed

TI-2006-02082 CVE-2006-2138 · GHSA-xjm6-pf3c-5gjq

Cross-site scripting (XSS) vulnerability in neomail.pl in NeoMail 1.29 allows remote…

LOW 24

Cross-site scripting (XSS) vulnerability in neomail.pl in NeoMail 1.29 allows remote attackers to inject arbitrary web script or HTML via the sessionid parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01973 Published 2006-05-02 No fix listed

TI-2006-00521 CVE-2006-0536 · GHSA-gp2r-2vq4-pw96

Cross-site scripting (XSS) vulnerability in neomail.pl in NeoMail 1.27 allows remote…

LOW 24

Cross-site scripting (XSS) vulnerability in neomail.pl in NeoMail 1.27 allows remote attackers to inject arbitrary web script or HTML via the sort parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01938 Published 2006-02-04 No fix listed

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0