Read the docs
TI-2012-00355 Aliases CVE-2012-0389GHSA-757w-c3r7-cxpp

Cross-site scripting (XSS) vulnerability in ForgottenPassword.aspx in MailEnable…

Priority LOW 31CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Cross-site scripting
Confidentiality · integrity · availability
None · Partial · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-79.

Summary

Cross-site scripting (XSS) vulnerability in ForgottenPassword.aspx in MailEnable Professional, Enterprise, and Premium 4.26 and earlier, 5.x before 5.53, and 6.x before 6.03 allows remote attackers to inject arbitrary web script or HTML via the Username parameter.

Why it matters now

EPSS 0.08121 94th percentileScored 2026-11-07
Public exploit Yes 3 exploit referencesTagged by NVD and the CNA
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 159

CPEVersionsRoleVendor
cpe:2.3:a:mailenable:mailenable:*:-:pro:*:*:*:*:*up to 4.26VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:1.2:*:professional:*:*:*:*:*1.2VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:1.2a:*:professional:*:*:*:*:*1.2aVulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:1.5:*:professional:*:*:*:*:*1.5VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:1.6:*:professional:*:*:*:*:*1.6VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:1.7:*:professional:*:*:*:*:*1.7VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:1.17:*:professional:*:*:*:*:*1.17VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:1.18:*:professional:*:*:*:*:*1.18VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:1.19:*:professional:*:*:*:*:*1.19VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:1.51:*:professional:*:*:*:*:*1.51VulnerableMailEnable
  • cpe:2.3:a:mailenable:mailenable:*:-:pro:*:*:*:*:* Versions up to 4.26 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:1.2:*:professional:*:*:*:*:* Versions 1.2 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:1.2a:*:professional:*:*:*:*:* Versions 1.2a Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:1.5:*:professional:*:*:*:*:* Versions 1.5 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:1.6:*:professional:*:*:*:*:* Versions 1.6 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:1.7:*:professional:*:*:*:*:* Versions 1.7 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:1.17:*:professional:*:*:*:*:* Versions 1.17 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:1.18:*:professional:*:*:*:*:* Versions 1.18 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:1.19:*:professional:*:*:*:*:* Versions 1.19 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:1.51:*:professional:*:*:*:*:* Versions 1.51 Vulnerable ·MailEnable
Show 149 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:mailenable:mailenable:1.52:*:professional:*:*:*:*:*1.52VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:1.53:*:professional:*:*:*:*:*1.53VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:1.54:*:professional:*:*:*:*:*1.54VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:1.70:*:professional:*:*:*:*:*1.70VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:1.71:*:professional:*:*:*:*:*1.71VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:1.72:*:professional:*:*:*:*:*1.72VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:1.73:*:professional:*:*:*:*:*1.73VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:1.74:*:professional:*:*:*:*:*1.74VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:1.75:*:professional:*:*:*:*:*1.75VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:1.76:*:professional:*:*:*:*:*1.76VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:1.77:*:professional:*:*:*:*:*1.77VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:1.78:*:professional:*:*:*:*:*1.78VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:1.79:*:professional:*:*:*:*:*1.79VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:3.0:-:pro:*:*:*:*:*3.0VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:3.01:-:pro:*:*:*:*:*3.01VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:3.02:-:pro:*:*:*:*:*3.02VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:3.03:-:pro:*:*:*:*:*3.03VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:3.04:-:pro:*:*:*:*:*3.04VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:3.5:-:pro:*:*:*:*:*3.5VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:3.6:-:pro:*:*:*:*:*3.6VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:3.10:-:pro:*:*:*:*:*3.10VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:3.11:-:pro:*:*:*:*:*3.11VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:3.12:-:pro:*:*:*:*:*3.12VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:3.13:-:pro:*:*:*:*:*3.13VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:3.14:-:pro:*:*:*:*:*3.14VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:3.51:-:pro:*:*:*:*:*3.51VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:3.52:*:professional:*:*:*:*:*3.52VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:3.52:-:pro:*:*:*:*:*3.52VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:3.53:-:pro:*:*:*:*:*3.53VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:3.61:-:pro:*:*:*:*:*3.61VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:3.62:-:pro:*:*:*:*:*3.62VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:3.63:-:pro:*:*:*:*:*3.63VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:4.0:-:pro:*:*:*:*:*4.0VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:4.1:-:pro:*:*:*:*:*4.1VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:4.01:-:pro:*:*:*:*:*4.01VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:4.11:-:pro:*:*:*:*:*4.11VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:4.12:-:pro:*:*:*:*:*4.12VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:4.13:-:pro:*:*:*:*:*4.13VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:4.14:-:pro:*:*:*:*:*4.14VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:4.15:-:pro:*:*:*:*:*4.15VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:4.16:-:pro:*:*:*:*:*4.16VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:4.17:-:pro:*:*:*:*:*4.17VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:4.22:-:pro:*:*:*:*:*4.22VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:4.23:-:pro:*:*:*:*:*4.23VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:4.24:-:pro:*:*:*:*:*4.24VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:4.25:-:pro:*:*:*:*:*4.25VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:*:-:enterprise:*:*:*:*:*up to 4.26VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:1.00:*:enterprise:*:*:*:*:*1.00VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:1.1:*:enterprise:*:*:*:*:*1.1VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:1.01:*:enterprise:*:*:*:*:*1.01VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:1.02:*:enterprise:*:*:*:*:*1.02VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:1.2:*:enterprise:*:*:*:*:*1.2VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:1.03:*:enterprise:*:*:*:*:*1.03VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:1.04:*:enterprise:*:*:*:*:*1.04VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:1.21:*:enterprise:*:*:*:*:*1.21VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:1.22:*:enterprise:*:*:*:*:*1.22VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:1.23:*:enterprise:*:*:*:*:*1.23VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:1.24:*:enterprise:*:*:*:*:*1.24VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:1.25:*:enterprise:*:*:*:*:*1.25VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:1.26:*:enterprise:*:*:*:*:*1.26VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:3.0:-:enterprise:*:*:*:*:*3.0VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:3.01:-:enterprise:*:*:*:*:*3.01VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:3.02:-:enterprise:*:*:*:*:*3.02VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:3.03:-:enterprise:*:*:*:*:*3.03VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:3.04:-:enterprise:*:*:*:*:*3.04VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:3.5:-:enterprise:*:*:*:*:*3.5VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:3.6:-:enterprise:*:*:*:*:*3.6VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:3.10:-:enterprise:*:*:*:*:*3.10VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:3.11:-:enterprise:*:*:*:*:*3.11VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:3.12:-:enterprise:*:*:*:*:*3.12VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:3.13:-:enterprise:*:*:*:*:*3.13VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:3.14:-:enterprise:*:*:*:*:*3.14VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:3.51:-:enterprise:*:*:*:*:*3.51VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:3.52:*:enterprise:*:*:*:*:*3.52VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:3.52:-:enterprise:*:*:*:*:*3.52VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:3.53:-:enterprise:*:*:*:*:*3.53VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:3.61:-:enterprise:*:*:*:*:*3.61VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:3.62:-:enterprise:*:*:*:*:*3.62VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:3.63:-:enterprise:*:*:*:*:*3.63VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:4.0:-:enterprise:*:*:*:*:*4.0VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:4.01:-:enterprise:*:*:*:*:*4.01VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:4.1:-:enterprise:*:*:*:*:*4.1VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:4.11:-:enterprise:*:*:*:*:*4.11VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:4.12:-:enterprise:*:*:*:*:*4.12VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:4.13:-:enterprise:*:*:*:*:*4.13VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:4.14:-:enterprise:*:*:*:*:*4.14VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:4.15:-:enterprise:*:*:*:*:*4.15VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:4.16:-:enterprise:*:*:*:*:*4.16VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:4.17:-:enterprise:*:*:*:*:*4.17VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:4.22:-:enterprise:*:*:*:*:*4.22VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:4.23:-:enterprise:*:*:*:*:*4.23VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:4.24:-:enterprise:*:*:*:*:*4.24VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:4.25:-:enterprise:*:*:*:*:*4.25VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:*:*:premium:*:*:*:*:*up to 4.26VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:4.1:*:premium:*:*:*:*:*4.1VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:4.2:*:premium:*:*:*:*:*4.2VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:4.21:*:premium:*:*:*:*:*4.21VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:4.22:*:premium:*:*:*:*:*4.22VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:4.23:*:premium:*:*:*:*:*4.23VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:4.24:*:premium:*:*:*:*:*4.24VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:4.25:*:premium:*:*:*:*:*4.25VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:5.0:*:professional:*:*:*:*:*5.0VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:5.01:*:professional:*:*:*:*:*5.01VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:5.02:*:professional:*:*:*:*:*5.02VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:5.03:*:professional:*:*:*:*:*5.03VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:5.04:*:professional:*:*:*:*:*5.04VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:5.5:*:professional:*:*:*:*:*5.5VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:5.05:*:professional:*:*:*:*:*5.05VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:5.06:*:professional:*:*:*:*:*5.06VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:5.07:*:professional:*:*:*:*:*5.07VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:5.10:*:professional:*:*:*:*:*5.10VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:5.11:*:professional:*:*:*:*:*5.11VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:5.51:*:professional:*:*:*:*:*5.51VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:5.52:*:professional:*:*:*:*:*5.52VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:5.0:*:enterprise:*:*:*:*:*5.0VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:5.01:*:enterprise:*:*:*:*:*5.01VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:5.02:*:enterprise:*:*:*:*:*5.02VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:5.03:*:enterprise:*:*:*:*:*5.03VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:5.04:*:enterprise:*:*:*:*:*5.04VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:5.5:*:enterprise:*:*:*:*:*5.5VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:5.05:*:enterprise:*:*:*:*:*5.05VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:5.06:*:enterprise:*:*:*:*:*5.06VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:5.07:*:enterprise:*:*:*:*:*5.07VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:5.10:*:enterprise:*:*:*:*:*5.10VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:5.11:*:enterprise:*:*:*:*:*5.11VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:5.51:*:enterprise:*:*:*:*:*5.51VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:5.52:*:enterprise:*:*:*:*:*5.52VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:5.0:*:premium:*:*:*:*:*5.0VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:5.01:*:premium:*:*:*:*:*5.01VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:5.02:*:premium:*:*:*:*:*5.02VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:5.03:*:premium:*:*:*:*:*5.03VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:5.04:*:premium:*:*:*:*:*5.04VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:5.05:*:premium:*:*:*:*:*5.05VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:5.5:*:premium:*:*:*:*:*5.5VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:5.06:*:premium:*:*:*:*:*5.06VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:5.07:*:premium:*:*:*:*:*5.07VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:5.10:*:premium:*:*:*:*:*5.10VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:5.11:*:premium:*:*:*:*:*5.11VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:5.51:*:premium:*:*:*:*:*5.51VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:5.52:*:premium:*:*:*:*:*5.52VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:6.0:*:professional:*:*:*:*:*6.0VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:6.01:*:professional:*:*:*:*:*6.01VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:6.02:*:professional:*:*:*:*:*6.02VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:6.0:*:enterprise:*:*:*:*:*6.0VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:6.01:*:enterprise:*:*:*:*:*6.01VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:6.02:*:enterprise:*:*:*:*:*6.02VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:6.0:*:premium:*:*:*:*:*6.0VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:6.01:*:premium:*:*:*:*:*6.01VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable:6.02:*:premium:*:*:*:*:*6.02VulnerableMailEnable
  • cpe:2.3:a:mailenable:mailenable:1.52:*:professional:*:*:*:*:* Versions 1.52 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:1.53:*:professional:*:*:*:*:* Versions 1.53 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:1.54:*:professional:*:*:*:*:* Versions 1.54 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:1.70:*:professional:*:*:*:*:* Versions 1.70 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:1.71:*:professional:*:*:*:*:* Versions 1.71 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:1.72:*:professional:*:*:*:*:* Versions 1.72 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:1.73:*:professional:*:*:*:*:* Versions 1.73 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:1.74:*:professional:*:*:*:*:* Versions 1.74 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:1.75:*:professional:*:*:*:*:* Versions 1.75 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:1.76:*:professional:*:*:*:*:* Versions 1.76 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:1.77:*:professional:*:*:*:*:* Versions 1.77 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:1.78:*:professional:*:*:*:*:* Versions 1.78 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:1.79:*:professional:*:*:*:*:* Versions 1.79 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:3.0:-:pro:*:*:*:*:* Versions 3.0 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:3.01:-:pro:*:*:*:*:* Versions 3.01 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:3.02:-:pro:*:*:*:*:* Versions 3.02 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:3.03:-:pro:*:*:*:*:* Versions 3.03 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:3.04:-:pro:*:*:*:*:* Versions 3.04 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:3.5:-:pro:*:*:*:*:* Versions 3.5 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:3.6:-:pro:*:*:*:*:* Versions 3.6 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:3.10:-:pro:*:*:*:*:* Versions 3.10 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:3.11:-:pro:*:*:*:*:* Versions 3.11 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:3.12:-:pro:*:*:*:*:* Versions 3.12 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:3.13:-:pro:*:*:*:*:* Versions 3.13 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:3.14:-:pro:*:*:*:*:* Versions 3.14 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:3.51:-:pro:*:*:*:*:* Versions 3.51 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:3.52:*:professional:*:*:*:*:* Versions 3.52 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:3.52:-:pro:*:*:*:*:* Versions 3.52 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:3.53:-:pro:*:*:*:*:* Versions 3.53 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:3.61:-:pro:*:*:*:*:* Versions 3.61 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:3.62:-:pro:*:*:*:*:* Versions 3.62 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:3.63:-:pro:*:*:*:*:* Versions 3.63 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:4.0:-:pro:*:*:*:*:* Versions 4.0 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:4.1:-:pro:*:*:*:*:* Versions 4.1 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:4.01:-:pro:*:*:*:*:* Versions 4.01 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:4.11:-:pro:*:*:*:*:* Versions 4.11 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:4.12:-:pro:*:*:*:*:* Versions 4.12 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:4.13:-:pro:*:*:*:*:* Versions 4.13 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:4.14:-:pro:*:*:*:*:* Versions 4.14 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:4.15:-:pro:*:*:*:*:* Versions 4.15 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:4.16:-:pro:*:*:*:*:* Versions 4.16 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:4.17:-:pro:*:*:*:*:* Versions 4.17 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:4.22:-:pro:*:*:*:*:* Versions 4.22 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:4.23:-:pro:*:*:*:*:* Versions 4.23 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:4.24:-:pro:*:*:*:*:* Versions 4.24 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:4.25:-:pro:*:*:*:*:* Versions 4.25 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:*:-:enterprise:*:*:*:*:* Versions up to 4.26 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:1.00:*:enterprise:*:*:*:*:* Versions 1.00 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:1.1:*:enterprise:*:*:*:*:* Versions 1.1 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:1.01:*:enterprise:*:*:*:*:* Versions 1.01 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:1.02:*:enterprise:*:*:*:*:* Versions 1.02 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:1.2:*:enterprise:*:*:*:*:* Versions 1.2 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:1.03:*:enterprise:*:*:*:*:* Versions 1.03 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:1.04:*:enterprise:*:*:*:*:* Versions 1.04 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:1.21:*:enterprise:*:*:*:*:* Versions 1.21 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:1.22:*:enterprise:*:*:*:*:* Versions 1.22 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:1.23:*:enterprise:*:*:*:*:* Versions 1.23 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:1.24:*:enterprise:*:*:*:*:* Versions 1.24 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:1.25:*:enterprise:*:*:*:*:* Versions 1.25 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:1.26:*:enterprise:*:*:*:*:* Versions 1.26 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:3.0:-:enterprise:*:*:*:*:* Versions 3.0 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:3.01:-:enterprise:*:*:*:*:* Versions 3.01 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:3.02:-:enterprise:*:*:*:*:* Versions 3.02 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:3.03:-:enterprise:*:*:*:*:* Versions 3.03 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:3.04:-:enterprise:*:*:*:*:* Versions 3.04 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:3.5:-:enterprise:*:*:*:*:* Versions 3.5 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:3.6:-:enterprise:*:*:*:*:* Versions 3.6 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:3.10:-:enterprise:*:*:*:*:* Versions 3.10 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:3.11:-:enterprise:*:*:*:*:* Versions 3.11 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:3.12:-:enterprise:*:*:*:*:* Versions 3.12 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:3.13:-:enterprise:*:*:*:*:* Versions 3.13 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:3.14:-:enterprise:*:*:*:*:* Versions 3.14 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:3.51:-:enterprise:*:*:*:*:* Versions 3.51 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:3.52:*:enterprise:*:*:*:*:* Versions 3.52 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:3.52:-:enterprise:*:*:*:*:* Versions 3.52 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:3.53:-:enterprise:*:*:*:*:* Versions 3.53 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:3.61:-:enterprise:*:*:*:*:* Versions 3.61 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:3.62:-:enterprise:*:*:*:*:* Versions 3.62 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:3.63:-:enterprise:*:*:*:*:* Versions 3.63 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:4.0:-:enterprise:*:*:*:*:* Versions 4.0 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:4.01:-:enterprise:*:*:*:*:* Versions 4.01 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:4.1:-:enterprise:*:*:*:*:* Versions 4.1 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:4.11:-:enterprise:*:*:*:*:* Versions 4.11 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:4.12:-:enterprise:*:*:*:*:* Versions 4.12 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:4.13:-:enterprise:*:*:*:*:* Versions 4.13 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:4.14:-:enterprise:*:*:*:*:* Versions 4.14 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:4.15:-:enterprise:*:*:*:*:* Versions 4.15 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:4.16:-:enterprise:*:*:*:*:* Versions 4.16 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:4.17:-:enterprise:*:*:*:*:* Versions 4.17 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:4.22:-:enterprise:*:*:*:*:* Versions 4.22 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:4.23:-:enterprise:*:*:*:*:* Versions 4.23 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:4.24:-:enterprise:*:*:*:*:* Versions 4.24 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:4.25:-:enterprise:*:*:*:*:* Versions 4.25 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:*:*:premium:*:*:*:*:* Versions up to 4.26 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:4.1:*:premium:*:*:*:*:* Versions 4.1 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:4.2:*:premium:*:*:*:*:* Versions 4.2 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:4.21:*:premium:*:*:*:*:* Versions 4.21 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:4.22:*:premium:*:*:*:*:* Versions 4.22 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:4.23:*:premium:*:*:*:*:* Versions 4.23 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:4.24:*:premium:*:*:*:*:* Versions 4.24 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:4.25:*:premium:*:*:*:*:* Versions 4.25 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:5.0:*:professional:*:*:*:*:* Versions 5.0 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:5.01:*:professional:*:*:*:*:* Versions 5.01 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:5.02:*:professional:*:*:*:*:* Versions 5.02 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:5.03:*:professional:*:*:*:*:* Versions 5.03 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:5.04:*:professional:*:*:*:*:* Versions 5.04 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:5.5:*:professional:*:*:*:*:* Versions 5.5 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:5.05:*:professional:*:*:*:*:* Versions 5.05 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:5.06:*:professional:*:*:*:*:* Versions 5.06 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:5.07:*:professional:*:*:*:*:* Versions 5.07 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:5.10:*:professional:*:*:*:*:* Versions 5.10 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:5.11:*:professional:*:*:*:*:* Versions 5.11 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:5.51:*:professional:*:*:*:*:* Versions 5.51 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:5.52:*:professional:*:*:*:*:* Versions 5.52 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:5.0:*:enterprise:*:*:*:*:* Versions 5.0 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:5.01:*:enterprise:*:*:*:*:* Versions 5.01 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:5.02:*:enterprise:*:*:*:*:* Versions 5.02 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:5.03:*:enterprise:*:*:*:*:* Versions 5.03 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:5.04:*:enterprise:*:*:*:*:* Versions 5.04 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:5.5:*:enterprise:*:*:*:*:* Versions 5.5 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:5.05:*:enterprise:*:*:*:*:* Versions 5.05 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:5.06:*:enterprise:*:*:*:*:* Versions 5.06 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:5.07:*:enterprise:*:*:*:*:* Versions 5.07 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:5.10:*:enterprise:*:*:*:*:* Versions 5.10 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:5.11:*:enterprise:*:*:*:*:* Versions 5.11 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:5.51:*:enterprise:*:*:*:*:* Versions 5.51 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:5.52:*:enterprise:*:*:*:*:* Versions 5.52 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:5.0:*:premium:*:*:*:*:* Versions 5.0 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:5.01:*:premium:*:*:*:*:* Versions 5.01 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:5.02:*:premium:*:*:*:*:* Versions 5.02 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:5.03:*:premium:*:*:*:*:* Versions 5.03 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:5.04:*:premium:*:*:*:*:* Versions 5.04 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:5.05:*:premium:*:*:*:*:* Versions 5.05 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:5.5:*:premium:*:*:*:*:* Versions 5.5 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:5.06:*:premium:*:*:*:*:* Versions 5.06 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:5.07:*:premium:*:*:*:*:* Versions 5.07 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:5.10:*:premium:*:*:*:*:* Versions 5.10 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:5.11:*:premium:*:*:*:*:* Versions 5.11 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:5.51:*:premium:*:*:*:*:* Versions 5.51 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:5.52:*:premium:*:*:*:*:* Versions 5.52 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:6.0:*:professional:*:*:*:*:* Versions 6.0 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:6.01:*:professional:*:*:*:*:* Versions 6.01 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:6.02:*:professional:*:*:*:*:* Versions 6.02 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:6.0:*:enterprise:*:*:*:*:* Versions 6.0 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:6.01:*:enterprise:*:*:*:*:* Versions 6.01 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:6.02:*:enterprise:*:*:*:*:* Versions 6.02 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:6.0:*:premium:*:*:*:*:* Versions 6.0 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:6.01:*:premium:*:*:*:*:* Versions 6.01 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable:6.02:*:premium:*:*:*:*:* Versions 6.02 Vulnerable ·MailEnable

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-0389
  2. 2026-10-03 Alias added: GHSA-757w-c3r7-cxpp

References

  • TI-2025-28598 Cross Site Scripting (XSS) vulnerability in MailEnable before v10 allows a remote… CVSS 3.1CRITICAL 9.8
  • TI-2026-25313 MailEnable < 10.55 Reflected XSS via ManageShares.aspx SelectedIndex Parameter CVSS 4.0MEDIUM 5.1
  • TI-2026-25315 MailEnable < 10.55 Reflected XSS via FreeBusy.aspx StartDate Parameter CVSS 4.0MEDIUM 5.1
  • TI-2026-25314 MailEnable < 10.55 Reflected XSS via FreeBusy.aspx StartDate Parameter CVSS 4.0MEDIUM 5.1
  • TI-2015-07656 MailEnable before 8.60 allows Privilege Escalation because admin accounts could be… CVSS 3.0CRITICAL 9.8
  • TI-2015-07658 MailEnable before 8.60 allows XXE via an XML document in the request.aspx Options parameter. CVSS 3.1CRITICAL 10.0
See all 49 →

Sources