Vendors / NetWin Records 51 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 7
CVSS high 12
Exploited now NetWin records in CISA KEV No NetWin vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 26
The default configuration of NetWin dMailWeb and cwMail trusts all POP servers, which allows attackers to bypass normal authentication and cause a denial of service.
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01588 · Published 2000-10-13 · No fix listed
Priority LOW 26
NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to bypass authentication and use the server for mail relay via a username that contains a carriage return.
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.016 · Published 2000-10-13 · No fix listed
Priority LOW 26
NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to cause a denial of service via a long username parameter.
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0136 · Published 2000-07-19 · No fix listed
Priority LOW 26
NetWin dMailWeb and cwMail 2.6i and earlier allows remote attackers to cause a denial of service via a long POP parameter (pophost).
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01345 · Published 2000-07-19 · No fix listed
Priority LOW 23
Buffer overflow in CWMail.exe in NetWin before 2.8a allows remote authenticated users to execute arbitrary code via a long item parameter.
CVSS 2.0 MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.00999 · Published 2002-05-03 · No fix listed
Open these records in search → All records by CVSS severity
7 12 31 1 0
THREATIST.IORead the docs