Vulnerabilities

Filters

Reset all

2 selected

50 records

Sort

Vendor: MailEnable Component: Mailenable Clear all filters

TI-2026-32345 CVE-2026-44400 · GHSA-f3v7-jqh4-whf5

MailEnable Enterprise Premium < 10.55 Authorization Bypass via WebAdmin

MEDIUM 40

MailEnable Enterprise Premium 10.55 and earlier contains an improper authorization vulnerability in the WebAdmin mobile portal that allows attackers to bypass authentication checks by reusing AuthenticationToken cookies…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0035 Published 2026-05-08 No fix listed CWE-639

TI-2026-25315 CVE-2026-32852 · GHSA-cwm4-pqjw-r7wj

MailEnable < 10.55 Reflected XSS via FreeBusy.aspx StartDate Parameter

MEDIUM 56

MailEnable versions prior to 10.55 contain a reflected cross-site scripting vulnerability in the webmail interface that allows remote attackers to execute arbitrary JavaScript in a victim's browser by crafting a maliciou…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00308 Published 2026-03-23 Fixed in 10.55.0 CWE-79

TI-2026-25314 CVE-2026-32851 · GHSA-5fjm-c352-35cv

MailEnable < 10.55 Reflected XSS via FreeBusy.aspx StartDate Parameter

MEDIUM 56

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00319 Published 2026-03-23 Fixed in 10.55.0 CWE-79

TI-2026-25313 CVE-2026-32850 · GHSA-rh96-w7cw-pph4

MailEnable < 10.55 Reflected XSS via ManageShares.aspx SelectedIndex Parameter

MEDIUM 62

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00319 Published 2026-03-23 Fixed in 10.55.0 CWE-79

TI-2025-24499 CVE-2025-34427 · GHSA-3gpm-78pq-33vj

MailEnable < 10.54 Cleartext Credential Storage in AUTH.TAB

LOW 35

MailEnable versions prior to 10.54 contain a cleartext storage of credentials vulnerability that can lead to local credential compromise and account takeover.

CVSS 4.0HIGH 8.4 Local Low privileges No interaction EPSS 0.00116 Published 2025-12-10 Fixed in 10.54 CWE-312

TI-2025-24500 CVE-2025-34428 · GHSA-pg36-9c99-fh6w

MailEnable < 10.54 Cleartext Credential Storage in AUTH.SAV

LOW 35

MailEnable versions prior to 10.54 contain a cleartext storage of credentials vulnerability that can lead to local credential compromise and account takeover.

CVSS 4.0HIGH 8.4 Local Low privileges No interaction EPSS 0.0012 Published 2025-12-10 Fixed in 10.54 CWE-312

TI-2025-24494 CVE-2025-34421 · GHSA-g4vc-m5pm-qwxv

MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAISP.DLL

LOW 38

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00196 Published 2025-12-10 Fixed in 10.54 CWE-427

TI-2025-24490 CVE-2025-34417 · GHSA-r73m-3c4x-r955

MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAISO.DLL

LOW 38

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00171 Published 2025-12-10 Fixed in 10.54 CWE-427

TI-2025-24492 CVE-2025-34419 · GHSA-47rc-xxqp-2645

MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAISM.DLL

LOW 38

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00168 Published 2025-12-10 Fixed in 10.54 CWE-427

TI-2025-24489 CVE-2025-34416 · GHSA-r748-9rxj-hmw2

MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIPO.DLL

LOW 38

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00171 Published 2025-12-10 Fixed in 10.54 CWE-427

TI-2025-24495 CVE-2025-34422 · GHSA-vrxc-52ff-jq62

MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIPC.DLL

LOW 38

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00171 Published 2025-12-10 Fixed in 10.54 CWE-427

TI-2025-24491 CVE-2025-34418 · GHSA-w7w2-5g5h-6fwf

MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIMF.DLL

LOW 38

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00168 Published 2025-12-10 Fixed in 10.54 CWE-427

TI-2025-24497 CVE-2025-34424 · GHSA-mr5p-78vr-4rc7

MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIDP.DLL

LOW 38

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00168 Published 2025-12-10 Fixed in 10.54 CWE-427

TI-2025-24496 CVE-2025-34423 · GHSA-r47g-vhxj-3c8p

MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIAU.DLL

LOW 38

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00168 Published 2025-12-10 Fixed in 10.54 CWE-427

TI-2025-24493 CVE-2025-34420 · GHSA-m3xw-286r-cr7p

MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIAM.DLL

LOW 38

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00171 Published 2025-12-10 Fixed in 10.54 CWE-427

TI-2025-24498 CVE-2025-34425 · GHSA-v4hm-2c9r-89mm

MailEnable < 10.54 Reflected XSS in WindowContext Parameter of MAI/compose.aspx

LOW 24

MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the WindowContext parameter of /Mondo/lang/sys/Forms/MAI/compose.aspx.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00404 Published 2025-12-09 Fixed in 10.54 CWE-79

TI-2025-24473 CVE-2025-34396 · GHSA-8446-3m3q-pqfg

MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAINFY.DLL

LOW 38

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00193 Published 2025-12-09 Fixed in 10.54 CWE-427

TI-2025-24484 CVE-2025-34408 · GHSA-3jvf-36wg-6h35

MailEnable < 10.54 Reflected XSS in Added Parameter of MAI/AddRecipientsResult.aspx

LOW 31

MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the Added parameter of /Mondo/lang/sys/Forms/MAI/AddRecipientsResult.aspx.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00491 Published 2025-12-09 Fixed in 10.54 CWE-79

TI-2025-24475 CVE-2025-34398 · GHSA-9v9p-9qwc-j6x8

MailEnable < 10.54 Reflected XSS in AddressesBcc Parameter of AddressBook.aspx

LOW 30

MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the AddressesBcc parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00395 Published 2025-12-09 Fixed in 10.54 CWE-79

TI-2025-24476 CVE-2025-34399 · GHSA-r98j-8f85-mgjw

MailEnable < 10.54 Reflected XSS in AddressesCc Parameter of AddressBook.aspx

LOW 24

MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the AddressesCc parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00395 Published 2025-12-09 Fixed in 10.54 CWE-79

TI-2025-24477 CVE-2025-34400 · GHSA-cqhq-3vgx-2rc7

MailEnable < 10.54 Reflected XSS in AddressesTo Parameter of AddressBook.aspx

LOW 24

MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the AddressesTo parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00395 Published 2025-12-09 Fixed in 10.54 CWE-79

TI-2025-24485 CVE-2025-34409 · GHSA-34w2-vr99-v872

MailEnable < 10.54 Reflected XSS in Failed Parameter of MAI/AddRecipientsResult.aspx

LOW 25

MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the Failed parameter of /Mondo/lang/sys/Forms/MAI/AddRecipientsResult.aspx.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00491 Published 2025-12-09 Fixed in 10.54 CWE-79

TI-2025-24478 CVE-2025-34401 · GHSA-hvm3-r882-vhwp

MailEnable < 10.54 Reflected XSS in FieldBcc Parameter of AddressBook.aspx

LOW 30

MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the FieldBcc parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00395 Published 2025-12-09 Fixed in 10.54 CWE-79

TI-2025-24479 CVE-2025-34402 · GHSA-hcm9-8qqf-jc2f

MailEnable < 10.54 Reflected XSS in FieldCc Parameter of AddressBook.aspx

LOW 30

MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the FieldCc parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00395 Published 2025-12-09 Fixed in 10.54 CWE-79

TI-2025-24480 CVE-2025-34403 · GHSA-w855-c23r-66cr

MailEnable < 10.54 Reflected XSS in FieldTo Parameter of AddressBook.aspx

LOW 30

MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the FieldTo parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00395 Published 2025-12-09 Fixed in 10.54 CWE-79