Vulnerabilities

TI-2006-02082 CVE-2006-2138 · GHSA-xjm6-pf3c-5gjq

Cross-site scripting (XSS) vulnerability in neomail.pl in NeoMail 1.29 allows remote…

LOW 24

Cross-site scripting (XSS) vulnerability in neomail.pl in NeoMail 1.29 allows remote attackers to inject arbitrary web script or HTML via the sessionid parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01973 Published 2006-05-02 No fix listed

TI-2006-00690 CVE-2006-0711 · GHSA-j8r3-h5ph-8fcm

The (1) addfolder and (2) deletefolder functions in neomail-prefs.pl in NeoMail 1.28 do…

LOW 26

The (1) addfolder and (2) deletefolder functions in neomail-prefs.pl in NeoMail 1.28 do not validate the Session ID, which allows remote attackers to add and delete arbitrary files, when configured with homedirfolders an…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01487 Published 2006-02-15 No fix listed

TI-2006-00521 CVE-2006-0536 · GHSA-gp2r-2vq4-pw96

Cross-site scripting (XSS) vulnerability in neomail.pl in NeoMail 1.27 allows remote…

LOW 24

Cross-site scripting (XSS) vulnerability in neomail.pl in NeoMail 1.27 allows remote attackers to inject arbitrary web script or HTML via the sort parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01938 Published 2006-02-04 No fix listed

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in neomail.pl in NeoMail 1.29 allows remote…

The (1) addfolder and (2) deletefolder functions in neomail-prefs.pl in NeoMail 1.28 do…

Cross-site scripting (XSS) vulnerability in neomail.pl in NeoMail 1.27 allows remote…