CVE-2015-2769: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the Personal Email Manager PEM in Websense TRITON AP-EMAIL before 8.0.0 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2015-2771: Exposure of Sensitive Information to an Unauthorized Actor

The Mail Server in Websense TRITON AP-EMAIL and V-Series appliances before 8.0.0 uses plaintext credentials, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2015-2766: Undefined Security Weakness

The Personal Email Manager PEM in Websense TRITON AP-EMAIL before 8.0.0 allows attackers to have unspecified impact via a brute force attack...

CVE-2015-2768: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Websense TRITON AP-EMAIL before 8.0.0 and V-Series 7.7 appliances allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-2767: Undefined Security Weakness

Unspecified vulnerability in Websense TRITON AP-EMAIL before 8.0.0 has unknown impact and attack vectors, related to "Autocomplete Enabled."...

CVE-2015-2702

Cross-site scripting XSS vulnerability in the Message Log in the Email Security Gateway in Websense TRITON AP-EMAIL before 8.0.0 and V-Series 7.7 appliances allows remote attackers to inject arbitrary web script or HTML via the sender address in an email...

CVE-2015-2702

CVE-2015-2702 describes a Cross-Site Scripting (XSS) vulnerability in the Message Log of Websense TRITON AP-EMAIL (Email Security Gateway) and V-Series appliances. The issue allows remote attackers to inject arbitrary web script or HTML via the sender address in an email when viewing the audit lo...

CVE-2015-2702: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Message Log in the Email Security Gateway in Websense TRITON AP-EMAIL before 8.0.0 and V-Series 7.7 appliances allows remote attackers to inject arbitrary web script or HTML via the sender address in an email...