Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2007-0651

🗓️ 15 Feb 2007 23:00:00Reported by flexeraType 
cve
 cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 43 Views🌐 WEB

Multiple XSS vulnerabilities in MailEnable Professional before 2.37 allow remote attackers to inject arbitrary Javascript script via e-mail and ID parameter

Related
Detection
Refs
Paths
Social
ReporterTitlePublishedViews
Family
Cvelist		CVE-2007-0651
15 Feb 200723:00
–cvelist
EUVD		EUVD-2007-0649
7 Oct 202500:30
–euvd
Tenable Nessus		MailEnable Web Mail Client Multiple Vulnerabilities (XSS, CSRF)
15 Feb 200700:00
–nessus
NVD		CVE-2007-0651
15 Feb 200723:28
–nvd
Prion		Cross site scripting
15 Feb 200723:28
–prion
securityvulns		[Full-disclosure] Secunia Research: MailEnable Web Mail Client Multiple Vulnerabilities
14 Feb 200700:00
–securityvulns
securityvulns		MailEnable multiple security vulnerabilities
2 Mar 200700:00
–securityvulns
NVD
Node
mailenablemailenable_professionalMatch1.0.004
OR
mailenablemailenable_professionalMatch1.0.005
OR
mailenablemailenable_professionalMatch1.0.006
OR
mailenablemailenable_professionalMatch1.0.007
OR
mailenablemailenable_professionalMatch1.0.008
OR
mailenablemailenable_professionalMatch1.0.009
OR
mailenablemailenable_professionalMatch1.0.010
OR
mailenablemailenable_professionalMatch1.0.011
OR
mailenablemailenable_professionalMatch1.0.012
OR
mailenablemailenable_professionalMatch1.0.013
OR
mailenablemailenable_professionalMatch1.0.014
OR
mailenablemailenable_professionalMatch1.0.015
OR
mailenablemailenable_professionalMatch1.0.016
OR
mailenablemailenable_professionalMatch1.0.017
OR
mailenablemailenable_professionalMatch1.1
OR
mailenablemailenable_professionalMatch1.2
OR
mailenablemailenable_professionalMatch1.2a
OR
mailenablemailenable_professionalMatch1.5
OR
mailenablemailenable_professionalMatch1.6
OR
mailenablemailenable_professionalMatch1.7
OR
mailenablemailenable_professionalMatch1.12
OR
mailenablemailenable_professionalMatch1.13
OR
mailenablemailenable_professionalMatch1.14
OR
mailenablemailenable_professionalMatch1.15
OR
mailenablemailenable_professionalMatch1.16
OR
mailenablemailenable_professionalMatch1.17
OR
mailenablemailenable_professionalMatch1.18
OR
mailenablemailenable_professionalMatch1.19
OR
mailenablemailenable_professionalMatch1.51
OR
mailenablemailenable_professionalMatch1.52
OR
mailenablemailenable_professionalMatch1.53
OR
mailenablemailenable_professionalMatch1.54
OR
mailenablemailenable_professionalMatch1.72
OR
mailenablemailenable_professionalMatch1.73
OR
mailenablemailenable_professionalMatch1.82
OR
mailenablemailenable_professionalMatch1.83
OR
mailenablemailenable_professionalMatch1.84
OR
mailenablemailenable_professionalMatch1.101
OR
mailenablemailenable_professionalMatch1.102
OR
mailenablemailenable_professionalMatch1.103
OR
mailenablemailenable_professionalMatch1.104
OR
mailenablemailenable_professionalMatch1.105
OR
mailenablemailenable_professionalMatch1.106
OR
mailenablemailenable_professionalMatch1.107
OR
mailenablemailenable_professionalMatch1.108
OR
mailenablemailenable_professionalMatch1.109
OR
mailenablemailenable_professionalMatch1.110
OR
mailenablemailenable_professionalMatch1.111
OR
mailenablemailenable_professionalMatch1.112
OR
mailenablemailenable_professionalMatch1.113
OR
mailenablemailenable_professionalMatch1.114
OR
mailenablemailenable_professionalMatch1.115
OR
mailenablemailenable_professionalMatch1.116
OR
mailenablemailenable_professionalMatch2.0
OR
mailenablemailenable_professionalMatch2.1
OR
mailenablemailenable_professionalMatch2.2
OR
mailenablemailenable_professionalMatch2.32
OR
mailenablemailenable_professionalMatch2.33
OR
mailenablemailenable_professionalMatch2.34
OR
mailenablemailenable_professionalMatch2.35
OR
mailenablemailenable_professionalMatch2.351
ParameterPositionPathDescriptionCWE
IDquery parammewebmail/base/default/lang/EN/right.aspXSS via ID parameter on right.asp in MailEnable MeWebMail core.CWE-79
IDquery parammewebmail/base/default/lang/EN/Forms/MAI/list.aspXSS via ID parameter on Forms/MAI/list.asp in MailEnable MeWebMail core.CWE-79
IDquery parammewebmail/base/default/lang/EN/Forms/VCF/list.aspXSS via ID parameter on Forms/VCF/list.asp in MailEnable MeWebMail core.CWE-79

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
23 Apr 2026 00:35Current
5.9Medium risk
Vulners AI Score5.9
CVSS 24.3
EPSS0.03576
mailenable professionalxsscve-2007-0651security vulnerabilityremote attack
43