Pmail

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Pmail records in CISA KEV

No Pmail vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Pegasus · all components

TI-2004-02383 CVE-2004-2513 · GHSA-q6fr-pmm3-pp3p

MEDIUM 55

Buffer overflow in the IMAP service of Mercury (Pegasus) Mail 4.01 allows remote attackers to execute arbitrary code via a long SELECT command.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.09781 Published 2005-10-25 No fix listed

TI-2017-06511 CVE-2017-9046 · GHSA-r9hx-hmhj-28pf

LOW 33

winpm-32.exe in Pegasus Mail (aka Pmail) v4.72 build 572 allows code execution via a crafted ssgp.dll file that must be installed locally.

CVSS 3.0HIGH 7.3 Local Low privileges User interaction EPSS 0.00569 Published 2017-05-21 No fix listed CWE-20