Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: MailEnable — mailenable.com/rss/article.asp?Source=RSSADMIN&ID=MAILENABL… Clear all filters
TI-2026-25315 CVE-2026-32852 · GHSA-cwm4-pqjw-r7wj

MailEnable < 10.55 Reflected XSS via FreeBusy.aspx StartDate Parameter

Priority MEDIUM 56

MailEnable versions prior to 10.55 contain a reflected cross-site scripting vulnerability in the webmail interface that allows remote attackers to execute arbitrary JavaScript in a victim's browser by crafting a maliciou…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00308 Published 2026-03-23 Fixed in 10.55.0 CWE-79
TI-2026-25314 CVE-2026-32851 · GHSA-5fjm-c352-35cv

MailEnable < 10.55 Reflected XSS via FreeBusy.aspx StartDate Parameter

Priority MEDIUM 56

MailEnable versions prior to 10.55 contain a reflected cross-site scripting vulnerability in the webmail interface that allows remote attackers to execute arbitrary JavaScript in a victim's browser by crafting a maliciou…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00319 Published 2026-03-23 Fixed in 10.55.0 CWE-79
TI-2026-25313 CVE-2026-32850 · GHSA-rh96-w7cw-pph4

MailEnable < 10.55 Reflected XSS via ManageShares.aspx SelectedIndex Parameter

Priority MEDIUM 62

MailEnable versions prior to 10.55 contain a reflected cross-site scripting vulnerability in the webmail interface that allows remote attackers to execute arbitrary JavaScript in a victim's browser by crafting a maliciou…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00319 Published 2026-03-23 Fixed in 10.55.0 CWE-79