Priority LOW 25
An Authenticated Reflected Cross-site scripting at BCC Parameter was discovered in MDaemon before 22.0.0 .
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00493 · Published 2022-05-11 · No fix listed CWE-79
Priority LOW 25
An Authenticated Reflected Cross-site scripting at CC Parameter was discovered in MDaemon before 22.0.0 .
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00493 · Published 2022-05-11 · No fix listed CWE-79
Priority LOW 37
An issue was discovered in MDaemon before 20.0.4.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.02695 · Published 2021-04-14 · No fix listed CWE-610
Priority MEDIUM 41
An issue was discovered in MDaemon before 20.0.4.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01554 · Published 2021-04-14 · No fix listed CWE-74
Priority LOW 39
An issue was discovered in MDaemon before 20.0.4.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0065 · Published 2021-04-14 · No fix listed CWE-352
Priority LOW 29
An issue was discovered in MDaemon before 20.0.4.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00926 · Published 2021-04-14 · No fix listed CWE-79
Priority LOW 29
MDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (issue 2 of 2).
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00793 · Published 2019-02-21 · No fix listed CWE-79
Priority LOW 29
MDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (issue 1 of 2).
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00793 · Published 2019-02-21 · No fix listed CWE-79
Priority LOW 26
Multiple cross-site scripting (XSS) vulnerabilities in Alt-N MDaemon Free 12.5.4 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) the Cascading Style Sheets (CSS) expressi…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.03232 · Published 2012-08-12 · No fix listed CWE-79
Priority MEDIUM 43
The WordClient interface in Alt-N Technologies MDaemon 9.6.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted HTTP POST request.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.2279 · Published 2008-06-10 · No fix listed CWE-399
Priority MEDIUM 62
Stack-based buffer overflow in the IMAP server in Alt-N Technologies MDaemon 9.6.4 allows remote authenticated users to execute arbitrary code via a FETCH command with a long BODY.
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.57075 · Published 2008-03-17 · No fix listed CWE-119
THREATIST.IORead the docs