Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: NetWin Component: Webmail Clear all filters
TI-2008-01009 CVE-2008-1055 · GHSA-7rxv-h96q-xxv7

Format string vulnerability in webmail.exe in NetWin SurgeMail 38k4 and earlier and beta…

Priority MEDIUM 44

Format string vulnerability in webmail.exe in NetWin SurgeMail 38k4 and earlier and beta 39a, and WebMail 3.1s and earlier, allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitra…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.07946 Published 2008-02-27 No fix listed CWE-134
TI-2004-02417 CVE-2004-2547 · GHSA-p72x-wpgm-6rr5

NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to obtain…

Priority LOW 19

NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to obtain sensitive information via HTTP requests that (a) specify the / URI, (b) specify the /scripts/ URI, or (c) specify a non-existent file, whi…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.03094 Published 2005-11-21 No fix listed