TI-2026-84866 CVE-2026-114552 · GHSA-frf5-gc98-7cmj
XML external entity processing in MailEnable parseObjectResponse discloses data
Priority LOW 29
MailEnable parseObjectResponse XML External Entity Processing Information Disclosure Vulnerability.
Vulnerabilities
91 records
TI-2026-84865 CVE-2026-114551 · GHSA-cx97-x7hm-5456
Cleartext storage of mailbox credentials in MailEnable
Priority LOW 26
MailEnable Auth Cleartext Storage Information Disclosure Vulnerability.
TI-2026-32345 CVE-2026-44400 · GHSA-f3v7-jqh4-whf5
MailEnable Enterprise Premium < 10.55 Authorization Bypass via WebAdmin
Priority MEDIUM 40
MailEnable Enterprise Premium 10.55 and earlier contains an improper authorization vulnerability in the WebAdmin mobile portal that allows attackers to bypass authentication checks by reusing AuthenticationToken cookies…
TI-2026-25315 CVE-2026-32852 · GHSA-cwm4-pqjw-r7wj
MailEnable < 10.55 Reflected XSS via FreeBusy.aspx StartDate Parameter
Priority MEDIUM 56
MailEnable versions prior to 10.55 contain a reflected cross-site scripting vulnerability in the webmail interface that allows remote attackers to execute arbitrary JavaScript in a victim's browser by crafting a maliciou…
TI-2026-25314 CVE-2026-32851 · GHSA-5fjm-c352-35cv
MailEnable < 10.55 Reflected XSS via FreeBusy.aspx StartDate Parameter
Priority MEDIUM 56
MailEnable versions prior to 10.55 contain a reflected cross-site scripting vulnerability in the webmail interface that allows remote attackers to execute arbitrary JavaScript in a victim's browser by crafting a maliciou…
TI-2026-25313 CVE-2026-32850 · GHSA-rh96-w7cw-pph4
MailEnable < 10.55 Reflected XSS via ManageShares.aspx SelectedIndex Parameter
Priority MEDIUM 62
MailEnable versions prior to 10.55 contain a reflected cross-site scripting vulnerability in the webmail interface that allows remote attackers to execute arbitrary JavaScript in a victim's browser by crafting a maliciou…
TI-2025-24499 CVE-2025-34427 · GHSA-3gpm-78pq-33vj
MailEnable < 10.54 Cleartext Credential Storage in AUTH.TAB
Priority LOW 35
MailEnable versions prior to 10.54 contain a cleartext storage of credentials vulnerability that can lead to local credential compromise and account takeover.
TI-2025-24500 CVE-2025-34428 · GHSA-pg36-9c99-fh6w
MailEnable < 10.54 Cleartext Credential Storage in AUTH.SAV
Priority LOW 35
MailEnable versions prior to 10.54 contain a cleartext storage of credentials vulnerability that can lead to local credential compromise and account takeover.
TI-2025-24494 CVE-2025-34421 · GHSA-g4vc-m5pm-qwxv
MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAISP.DLL
Priority LOW 38
MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.
TI-2025-24490 CVE-2025-34417 · GHSA-r73m-3c4x-r955
MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAISO.DLL
Priority LOW 38
MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.
TI-2025-24492 CVE-2025-34419 · GHSA-47rc-xxqp-2645
MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAISM.DLL
Priority LOW 38
MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.
TI-2025-24489 CVE-2025-34416 · GHSA-r748-9rxj-hmw2
MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIPO.DLL
Priority LOW 38
MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.
TI-2025-24495 CVE-2025-34422 · GHSA-vrxc-52ff-jq62
MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIPC.DLL
Priority LOW 38
MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.
TI-2025-24491 CVE-2025-34418 · GHSA-w7w2-5g5h-6fwf
MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIMF.DLL
Priority LOW 38
MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.
TI-2025-24497 CVE-2025-34424 · GHSA-mr5p-78vr-4rc7
MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIDP.DLL
Priority LOW 38
MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.
TI-2025-24496 CVE-2025-34423 · GHSA-r47g-vhxj-3c8p
MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIAU.DLL
Priority LOW 38
MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.
TI-2025-24493 CVE-2025-34420 · GHSA-m3xw-286r-cr7p
MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIAM.DLL
Priority LOW 38
MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.
TI-2025-24498 CVE-2025-34425 · GHSA-v4hm-2c9r-89mm
MailEnable < 10.54 Reflected XSS in WindowContext Parameter of MAI/compose.aspx
Priority LOW 24
MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the WindowContext parameter of /Mondo/lang/sys/Forms/MAI/compose.aspx.
TI-2025-24473 CVE-2025-34396 · GHSA-8446-3m3q-pqfg
MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAINFY.DLL
Priority LOW 38
MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.
TI-2025-24484 CVE-2025-34408 · GHSA-3jvf-36wg-6h35
MailEnable < 10.54 Reflected XSS in Added Parameter of MAI/AddRecipientsResult.aspx
Priority LOW 31
MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the Added parameter of /Mondo/lang/sys/Forms/MAI/AddRecipientsResult.aspx.
TI-2025-24475 CVE-2025-34398 · GHSA-9v9p-9qwc-j6x8
MailEnable < 10.54 Reflected XSS in AddressesBcc Parameter of AddressBook.aspx
Priority LOW 30
MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the AddressesBcc parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.
TI-2025-24476 CVE-2025-34399 · GHSA-r98j-8f85-mgjw
MailEnable < 10.54 Reflected XSS in AddressesCc Parameter of AddressBook.aspx
Priority LOW 24
MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the AddressesCc parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.
TI-2025-24477 CVE-2025-34400 · GHSA-cqhq-3vgx-2rc7
MailEnable < 10.54 Reflected XSS in AddressesTo Parameter of AddressBook.aspx
Priority LOW 24
MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the AddressesTo parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.
TI-2025-24485 CVE-2025-34409 · GHSA-34w2-vr99-v872
MailEnable < 10.54 Reflected XSS in Failed Parameter of MAI/AddRecipientsResult.aspx
Priority LOW 25
MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the Failed parameter of /Mondo/lang/sys/Forms/MAI/AddRecipientsResult.aspx.
TI-2025-24478 CVE-2025-34401 · GHSA-hvm3-r882-vhwp
MailEnable < 10.54 Reflected XSS in FieldBcc Parameter of AddressBook.aspx
Priority LOW 30
MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the FieldBcc parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.