Read the docs
TI-2007-00636 Aliases CVE-2007-0652GHSA-mmw7-r925-93v9

Cross-site request forgery (CSRF) vulnerability in MailEnable Professional before 2.37…

Priority LOW 27Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Cross-site request forgery (CSRF) vulnerability in MailEnable Professional before 2.37 allows remote attackers to modify arbitrary configurations and perform unauthorized actions as arbitrary users via a link or IMG tag.

Why it matters now

EPSS 0.01624 76th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 61

CPEVersionsRoleVendor
cpe:2.3:a:mailenable:mailenable_professional:1.0.004:*:*:*:*:*:*:*1.0.004VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.0.005:*:*:*:*:*:*:*1.0.005VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.0.006:*:*:*:*:*:*:*1.0.006VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.0.007:*:*:*:*:*:*:*1.0.007VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.0.008:*:*:*:*:*:*:*1.0.008VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.0.009:*:*:*:*:*:*:*1.0.009VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.0.010:*:*:*:*:*:*:*1.0.010VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.0.011:*:*:*:*:*:*:*1.0.011VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.0.012:*:*:*:*:*:*:*1.0.012VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.0.013:*:*:*:*:*:*:*1.0.013VulnerableMailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.0.004:*:*:*:*:*:*:* Versions 1.0.004 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.0.005:*:*:*:*:*:*:* Versions 1.0.005 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.0.006:*:*:*:*:*:*:* Versions 1.0.006 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.0.007:*:*:*:*:*:*:* Versions 1.0.007 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.0.008:*:*:*:*:*:*:* Versions 1.0.008 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.0.009:*:*:*:*:*:*:* Versions 1.0.009 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.0.010:*:*:*:*:*:*:* Versions 1.0.010 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.0.011:*:*:*:*:*:*:* Versions 1.0.011 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.0.012:*:*:*:*:*:*:* Versions 1.0.012 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.0.013:*:*:*:*:*:*:* Versions 1.0.013 Vulnerable ·MailEnable
Show 51 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:mailenable:mailenable_professional:1.0.014:*:*:*:*:*:*:*1.0.014VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.0.015:*:*:*:*:*:*:*1.0.015VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.0.016:*:*:*:*:*:*:*1.0.016VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.0.017:*:*:*:*:*:*:*1.0.017VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.1:*:*:*:*:*:*:*1.1VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.2:*:*:*:*:*:*:*1.2VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.2a:*:*:*:*:*:*:*1.2aVulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.5:*:*:*:*:*:*:*1.5VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.6:*:*:*:*:*:*:*1.6VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.7:*:*:*:*:*:*:*1.7VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.12:*:*:*:*:*:*:*1.12VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.13:*:*:*:*:*:*:*1.13VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.14:*:*:*:*:*:*:*1.14VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.15:*:*:*:*:*:*:*1.15VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.16:*:*:*:*:*:*:*1.16VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.17:*:*:*:*:*:*:*1.17VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.18:*:*:*:*:*:*:*1.18VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.19:*:*:*:*:*:*:*1.19VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.51:*:*:*:*:*:*:*1.51VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.52:*:*:*:*:*:*:*1.52VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.53:*:*:*:*:*:*:*1.53VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.54:*:*:*:*:*:*:*1.54VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.72:*:*:*:*:*:*:*1.72VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.73:*:*:*:*:*:*:*1.73VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.82:*:*:*:*:*:*:*1.82VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.83:*:*:*:*:*:*:*1.83VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.84:*:*:*:*:*:*:*1.84VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.101:*:*:*:*:*:*:*1.101VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.102:*:*:*:*:*:*:*1.102VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.103:*:*:*:*:*:*:*1.103VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.104:*:*:*:*:*:*:*1.104VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.105:*:*:*:*:*:*:*1.105VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.106:*:*:*:*:*:*:*1.106VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.107:*:*:*:*:*:*:*1.107VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.108:*:*:*:*:*:*:*1.108VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.109:*:*:*:*:*:*:*1.109VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.110:*:*:*:*:*:*:*1.110VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.111:*:*:*:*:*:*:*1.111VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.112:*:*:*:*:*:*:*1.112VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.113:*:*:*:*:*:*:*1.113VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.114:*:*:*:*:*:*:*1.114VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.115:*:*:*:*:*:*:*1.115VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.116:*:*:*:*:*:*:*1.116VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:2.0:*:*:*:*:*:*:*2.0VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:2.1:*:*:*:*:*:*:*2.1VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:2.2:*:*:*:*:*:*:*2.2VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:2.32:*:*:*:*:*:*:*2.32VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:2.33:*:*:*:*:*:*:*2.33VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:2.34:*:*:*:*:*:*:*2.34VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:2.35:*:*:*:*:*:*:*2.35VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:2.351:*:*:*:*:*:*:*2.351VulnerableMailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.0.014:*:*:*:*:*:*:* Versions 1.0.014 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.0.015:*:*:*:*:*:*:* Versions 1.0.015 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.0.016:*:*:*:*:*:*:* Versions 1.0.016 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.0.017:*:*:*:*:*:*:* Versions 1.0.017 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.1:*:*:*:*:*:*:* Versions 1.1 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.2:*:*:*:*:*:*:* Versions 1.2 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.2a:*:*:*:*:*:*:* Versions 1.2a Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.5:*:*:*:*:*:*:* Versions 1.5 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.6:*:*:*:*:*:*:* Versions 1.6 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.7:*:*:*:*:*:*:* Versions 1.7 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.12:*:*:*:*:*:*:* Versions 1.12 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.13:*:*:*:*:*:*:* Versions 1.13 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.14:*:*:*:*:*:*:* Versions 1.14 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.15:*:*:*:*:*:*:* Versions 1.15 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.16:*:*:*:*:*:*:* Versions 1.16 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.17:*:*:*:*:*:*:* Versions 1.17 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.18:*:*:*:*:*:*:* Versions 1.18 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.19:*:*:*:*:*:*:* Versions 1.19 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.51:*:*:*:*:*:*:* Versions 1.51 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.52:*:*:*:*:*:*:* Versions 1.52 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.53:*:*:*:*:*:*:* Versions 1.53 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.54:*:*:*:*:*:*:* Versions 1.54 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.72:*:*:*:*:*:*:* Versions 1.72 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.73:*:*:*:*:*:*:* Versions 1.73 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.82:*:*:*:*:*:*:* Versions 1.82 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.83:*:*:*:*:*:*:* Versions 1.83 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.84:*:*:*:*:*:*:* Versions 1.84 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.101:*:*:*:*:*:*:* Versions 1.101 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.102:*:*:*:*:*:*:* Versions 1.102 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.103:*:*:*:*:*:*:* Versions 1.103 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.104:*:*:*:*:*:*:* Versions 1.104 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.105:*:*:*:*:*:*:* Versions 1.105 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.106:*:*:*:*:*:*:* Versions 1.106 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.107:*:*:*:*:*:*:* Versions 1.107 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.108:*:*:*:*:*:*:* Versions 1.108 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.109:*:*:*:*:*:*:* Versions 1.109 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.110:*:*:*:*:*:*:* Versions 1.110 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.111:*:*:*:*:*:*:* Versions 1.111 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.112:*:*:*:*:*:*:* Versions 1.112 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.113:*:*:*:*:*:*:* Versions 1.113 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.114:*:*:*:*:*:*:* Versions 1.114 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.115:*:*:*:*:*:*:* Versions 1.115 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.116:*:*:*:*:*:*:* Versions 1.116 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:2.1:*:*:*:*:*:*:* Versions 2.1 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:2.2:*:*:*:*:*:*:* Versions 2.2 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:2.32:*:*:*:*:*:*:* Versions 2.32 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:2.33:*:*:*:*:*:*:* Versions 2.33 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:2.34:*:*:*:*:*:*:* Versions 2.34 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:2.35:*:*:*:*:*:*:* Versions 2.35 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:2.351:*:*:*:*:*:*:* Versions 2.351 Vulnerable ·MailEnable

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2007-0652
  2. 2026-10-03 Alias added: GHSA-mmw7-r925-93v9

References

Advisory 1

Other 2

  • TI-2006-06170 Stack-based buffer overflow in the IMAP service for MailEnable Professional and… CVSS 2.0HIGH 10.0
  • TI-2005-02156 Stack-based buffer overflow in the IMAP daemon (imapd) in MailEnable Professional 1.54… CVSS 2.0HIGH 7.2
  • TI-2005-01273 Buffer overflow in HTTPMail in MailEnable Enterprise 1.04 and earlier and Professional… CVSS 2.0HIGH 7.5
  • TI-2005-02983 Buffer overflow in the W3C logging for MailEnable Enterprise 1.1 and Professional 1.6… CVSS 2.0HIGH 7.5
  • TI-2005-02102 Unknown vulnerability in the SMTP service in MailEnable Standard before 1.9 and… CVSS 2.0MEDIUM 5.0
  • TI-2007-01259 Stack-based buffer overflow in the IMAP service in MailEnable Enterprise and Professional… CVSS 2.0HIGH 9.0
See all 32 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences