Vulnerabilities

TI-2025-24498 CVE-2025-34425 · GHSA-v4hm-2c9r-89mm

MailEnable < 10.54 Reflected XSS in WindowContext Parameter of MAI/compose.aspx

LOW 24

MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the WindowContext parameter of /Mondo/lang/sys/Forms/MAI/compose.aspx.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00404 Published 2025-12-09 Fixed in 10.54 CWE-79

TI-2025-24473 CVE-2025-34396 · GHSA-8446-3m3q-pqfg

MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAINFY.DLL

LOW 38

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00193 Published 2025-12-09 Fixed in 10.54 CWE-427

TI-2025-24484 CVE-2025-34408 · GHSA-3jvf-36wg-6h35

MailEnable < 10.54 Reflected XSS in Added Parameter of MAI/AddRecipientsResult.aspx

LOW 31

MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the Added parameter of /Mondo/lang/sys/Forms/MAI/AddRecipientsResult.aspx.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00491 Published 2025-12-09 Fixed in 10.54 CWE-79

TI-2025-24475 CVE-2025-34398 · GHSA-9v9p-9qwc-j6x8

MailEnable < 10.54 Reflected XSS in AddressesBcc Parameter of AddressBook.aspx

LOW 30

MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the AddressesBcc parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00395 Published 2025-12-09 Fixed in 10.54 CWE-79

TI-2025-24476 CVE-2025-34399 · GHSA-r98j-8f85-mgjw

MailEnable < 10.54 Reflected XSS in AddressesCc Parameter of AddressBook.aspx

LOW 24

MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the AddressesCc parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00395 Published 2025-12-09 Fixed in 10.54 CWE-79

TI-2025-24477 CVE-2025-34400 · GHSA-cqhq-3vgx-2rc7

MailEnable < 10.54 Reflected XSS in AddressesTo Parameter of AddressBook.aspx

LOW 24

MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the AddressesTo parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00395 Published 2025-12-09 Fixed in 10.54 CWE-79

TI-2025-24485 CVE-2025-34409 · GHSA-34w2-vr99-v872

MailEnable < 10.54 Reflected XSS in Failed Parameter of MAI/AddRecipientsResult.aspx

LOW 25

MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the Failed parameter of /Mondo/lang/sys/Forms/MAI/AddRecipientsResult.aspx.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00491 Published 2025-12-09 Fixed in 10.54 CWE-79

TI-2025-24478 CVE-2025-34401 · GHSA-hvm3-r882-vhwp

MailEnable < 10.54 Reflected XSS in FieldBcc Parameter of AddressBook.aspx

LOW 30

MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the FieldBcc parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00395 Published 2025-12-09 Fixed in 10.54 CWE-79

TI-2025-24479 CVE-2025-34402 · GHSA-hcm9-8qqf-jc2f

MailEnable < 10.54 Reflected XSS in FieldCc Parameter of AddressBook.aspx

LOW 30

MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the FieldCc parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00395 Published 2025-12-09 Fixed in 10.54 CWE-79

TI-2025-24480 CVE-2025-34403 · GHSA-w855-c23r-66cr

MailEnable < 10.54 Reflected XSS in FieldTo Parameter of AddressBook.aspx

LOW 30

MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the FieldTo parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00395 Published 2025-12-09 Fixed in 10.54 CWE-79

TI-2025-24482 CVE-2025-34406 · GHSA-qp2h-gx67-x4r6

MailEnable < 10.54 Reflected XSS in Id Parameter of Mobile/ContactDetails.aspx

LOW 24

MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the Id parameter of /Mobile/ContactDetails.aspx.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00395 Published 2025-12-09 Fixed in 10.54 CWE-79

TI-2025-24481 CVE-2025-34404 · GHSA-xgq2-qc35-hwwp

MailEnable < 10.54 Reflected XSS in InstanceScope Parameter of CAL/compose.aspx

LOW 24

MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the InstanceScope parameter of /Mondo/lang/sys/Forms/CAL/compose.aspx.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00395 Published 2025-12-09 Fixed in 10.54 CWE-79

TI-2025-24474 CVE-2025-34397 · GHSA-8mfq-w76h-5765

MailEnable < 10.54 Reflected XSS in Message Parameter of Mobile/Compose.aspx

LOW 30

MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the Message parameter of /Mobile/Compose.aspx.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00395 Published 2025-12-09 Fixed in 10.54 CWE-79

TI-2025-24483 CVE-2025-34407 · GHSA-q882-mpfm-x7wg

MailEnable < 10.54 Reflected XSS in theme Parameter of Statistics.aspx

LOW 25

MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the theme parameter of /Mondo/lang/sys/Forms/Statistics.aspx.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00491 Published 2025-12-09 Fixed in 10.54 CWE-79

Vulnerabilities

Filters