Vulnerabilities

TI-2008-06610 CVE-2008-6922 · GHSA-w655-3x88-v9g5

Multiple stack-based buffer overflows in CMailCOM.dll in CMailServer 5.4.6 allow remote…

MEDIUM 52

Multiple stack-based buffer overflows in CMailCOM.dll in CMailServer 5.4.6 allow remote attackers to execute arbitrary code via a long argument to the (1) CreateUserPath, (2) Logout, (3) DeleteMailByUID, (4) MoveToInbox,…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.09313 Published 2009-08-10 No fix listed CWE-119

TI-2007-01913 CVE-2007-1991 · GHSA-q866-9m3h-92xr

Cross-site scripting (XSS) vulnerability in mail/signup.asp in CmailServer WebMail 5.4.3…

LOW 22

Cross-site scripting (XSS) vulnerability in mail/signup.asp in CmailServer WebMail 5.4.3, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the Comment parameter, a different vector…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01022 Published 2007-04-12 No fix listed

TI-2007-01849 CVE-2007-1927 · GHSA-xr7h-q8xq-c8ww

Cross-site scripting (XSS) vulnerability in signup.asp in CmailServer WebMail 5.3.4 and…

LOW 23

Cross-site scripting (XSS) vulnerability in signup.asp in CmailServer WebMail 5.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the POP3Mail parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01256 Published 2007-04-10 No fix listed

TI-2004-01026 CVE-2004-1130 · GHSA-f2xh-qwqm-r3mv

Cross-site scripting (XSS) vulnerability in admin.asp in CMailServer 5.2 allows remote…

LOW 33

Cross-site scripting (XSS) vulnerability in admin.asp in CMailServer 5.2 allows remote attackers to execute arbitrary web script or HTML via personal information fields, such as (1) username, (2) name, or (3) comments.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01306 Published 2004-12-05 No fix listed

TI-2004-01025 CVE-2004-1129 · GHSA-rm27-245w-3rmp

SQL injection vulnerability in (1) fdelmail.asp, (2) addressc.asp, and possibly (3)…

MEDIUM 47

SQL injection vulnerability in (1) fdelmail.asp, (2) addressc.asp, and possibly (3) postmail.asp and (4) fmvmail.asp in CMailServer 5.2 allow remote attackers to inject arbitrary SQL commands and delete mail metadata or…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01933 Published 2004-12-05 No fix listed

TI-2003-00261 CVE-2003-0280 · GHSA-rmgr-f5p3-vq6f

Multiple buffer overflows in the SMTP Service for ESMTP CMailServer 4.0.2003.03.27 allow…

MEDIUM 58

Multiple buffer overflows in the SMTP Service for ESMTP CMailServer 4.0.2003.03.27 allow remote attackers to execute arbitrary code via long (1) MAIL FROM or (2) RCPT TO commands.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.14749 Published 2003-05-14 No fix listed

TI-2002-00776 CVE-2002-0799 · GHSA-m6gv-gq3g-662f

Buffer overflow in YoungZSoft CMailServer 3.30 allows remote attackers to execute…

MEDIUM 48

Buffer overflow in YoungZSoft CMailServer 3.30 allows remote attackers to execute arbitrary code via a long USER argument.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.13945 Published 2002-07-26 No fix listed