Vulnerabilities

TI-2010-03292 CVE-2010-3460 · GHSA-86c8-5m9f-52c3

Directory traversal vulnerability in the HTTP interface in AXIGEN Mail Server 7.4.1 for…

LOW 34

Directory traversal vulnerability in the HTTP interface in AXIGEN Mail Server 7.4.1 for Windows allows remote attackers to read arbitrary files via a %5C (encoded backslash) in the URL.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.08361 Published 2010-09-17 No fix listed CWE-22

TI-2010-03291 CVE-2010-3459 · GHSA-fw7j-37p2-4j4w

Cross-site scripting (XSS) vulnerability in the Ajax WebMail interface in AXIGEN Mail…

LOW 23

Cross-site scripting (XSS) vulnerability in the Ajax WebMail interface in AXIGEN Mail Server before 7.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01285 Published 2010-09-17 No fix listed CWE-79

TI-2009-01405 CVE-2009-1484 · GHSA-xh87-28w9-88hg

Cross-site scripting (XSS) vulnerability in the web mail interface feature in AXIGEN Mail…

LOW 23

Cross-site scripting (XSS) vulnerability in the web mail interface feature in AXIGEN Mail Server 6.2.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving e-mail messages.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01261 Published 2009-04-29 No fix listed CWE-79

Vulnerabilities

Filters

Directory traversal vulnerability in the HTTP interface in AXIGEN Mail Server 7.4.1 for…

Cross-site scripting (XSS) vulnerability in the Ajax WebMail interface in AXIGEN Mail…

Cross-site scripting (XSS) vulnerability in the web mail interface feature in AXIGEN Mail…