Vulnerabilities

TI-2007-01659 CVE-2007-1723 · GHSA-8f8g-3m88-qj8x

Multiple cross-site scripting (XSS) vulnerabilities in the administration console in…

LOW 34

Multiple cross-site scripting (XSS) vulnerabilities in the administration console in Secure Computing CipherTrust IronMail 6.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) network, (2) defR…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01954 Published 2007-03-28 No fix listed CWE-79

TI-2006-05026 CVE-2006-5210 · GHSA-2m97-7j97-3fhw

Directory traversal vulnerability in IronWebMail before 6.1.1 HotFix-17 allows remote…

LOW 30

Directory traversal vulnerability in IronWebMail before 6.1.1 HotFix-17 allows remote attackers to read arbitrary files via a GET request to the IM_FILE identifier with double-url-encoded "../" sequences ("%252e%252e/").

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04283 Published 2006-10-16 No fix listed

TI-2006-00523 CVE-2006-0538 · GHSA-2cfv-m46w-52hh

CipherTrust IronMail 5.0.1, when "Denial of Service Protection" is enabled, allows remote…

LOW 17

CipherTrust IronMail 5.0.1, when "Denial of Service Protection" is enabled, allows remote attackers to cause a denial of service (possibly CPU consumption) via a SYN flood with malformed TCP packets from multiple connect…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.02093 Published 2006-02-04 No fix listed

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in the administration console in…

Directory traversal vulnerability in IronWebMail before 6.1.1 HotFix-17 allows remote…

CipherTrust IronMail 5.0.1, when "Denial of Service Protection" is enabled, allows remote…