216 matches found
CVE-2012-5565
Cross-site scripting XSS vulnerability in js/compose-dimp.js in Horde Internet Mail Program IMP before 5.0.24, as used in Horde Groupware Webmail Edition before 4.0.9, allows remote attackers to inject arbitrary web script or HTML via a crafted name for an attached file, related to the dynamic vi...
CVE-2012-6640
Cross-site scripting XSS vulnerability in Horde Internet Mail Program IMP before 5.0.22, as used in Horde Groupware Webmail Edition before 4.0.9, allows remote attackers to inject arbitrary web script or HTML via a crafted SVG image attachment, a different vulnerability than CVE-2012-5565...
Cross site scripting
Cross-site scripting XSS vulnerability in Horde Internet Mail Program IMP before 5.0.22, as used in Horde Groupware Webmail Edition before 4.0.9, allows remote attackers to inject arbitrary web script or HTML via a crafted SVG image attachment, a different vulnerability than CVE-2012-5565...
CVE-2012-6640
Cross-site scripting XSS vulnerability in Horde Internet Mail Program IMP before 5.0.22, as used in Horde Groupware Webmail Edition before 4.0.9, allows remote attackers to inject arbitrary web script or HTML via a crafted SVG image attachment, a different vulnerability than CVE-2012-5565...
CVE-2012-5565
CVE-2012-5565 is an XSS vulnerability in Horde IMP (js/compose-dimp.js) used with Horde Groupware Webmail Edition prior to 4.0.9. The issue allows remote attackers to inject arbitrary web script or HTML by supplying a crafted name for an attached file in the dynamic view, affecting Horde IMP befo...
CVE-2012-6640
Cross-site scripting (XSS) in Horde Internet Mail Program (IMP) before 5.0.22, used with Horde Groupware Webmail Edition before 4.0.9, allows remote attackers to inject arbitrary web script or HTML via a crafted SVG image attachment. No remediation details are provided in the supplied documents.
CVE-2012-5565
Cross-site scripting XSS vulnerability in js/compose-dimp.js in Horde Internet Mail Program IMP before 5.0.24, as used in Horde Groupware Webmail Edition before 4.0.9, allows remote attackers to inject arbitrary web script or HTML via a crafted name for an attached file, related to the dynamic vi...
CVE-2012-6640
Cross-site scripting XSS vulnerability in Horde Internet Mail Program IMP before 5.0.22, as used in Horde Groupware Webmail Edition before 4.0.9, allows remote attackers to inject arbitrary web script or HTML via a crafted SVG image attachment, a different vulnerability than CVE-2012-5565...
GMime: Arbitrary code execution
Background GMime is a C/C++ library which may be used for the creation and parsing of messages using the Multipurpose Internet Mail Extension MIME. Description GMime contains a buffer overflow flaw in the GMIMEUUENCODELEN macro in gmime/gmime-encodings.h. Impact A context-dependent attacker could...
Format string
Format string vulnerability in ECTrace.dll in the iMailGateway service in the Internet Mail Gateway in OneBridge Server and DMZ Proxy in Sybase OneBridge Mobile Data Suite 5.5 and 5.6 allows remote attackers to execute arbitrary code via format string specifiers in unspecified string fields,...
CVE-2011-2475
CVE-2011-2475 involves a format string vulnerability in ECTrace.dll, used by the iMailGateway service of the Internet Mail Gateway in Sybase OneBridge Mobile Data Suite (versions 5.5 and 5.6). The flaw allows remote attackers to execute arbitrary code through improperly filtered input in authenti...
Fedora Update for gmime22 FEDORA-2010-1484
Check for the Version of gmime22 OpenVAS Vulnerability Test Fedora Update for gmime22 FEDORA-2010-1484 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Fedora Update for gmime22 FEDORA-2010-1429
Check for the Version of gmime22 OpenVAS Vulnerability Test Fedora Update for gmime22 FEDORA-2010-1429 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
[SECURITY] Fedora 11 Update: gmime22-2.2.23-8.fc11
The GMime suite provides a core library and set of utilities which may be used for the creation and parsing of messages using the Multipurpose Internet Mail Extension MIME...
Microsoft Exchange Server XEXCH50 Command Buffer Overflow (MS03-046; CVE-2003-0714)
The Microsoft Exchange Server is an implementation of an email server capable of handling numerous Internet protocol, including the Simple Mail Transfer Protocol SMTP. A security vulnerability exists in the Internet Mail Service in Exchange Server 5.5 and Exchange 2000 that could allow an...
Solaris 5.4 (sparc) : 105346-12
Solstice Internet Mail Server 2.0: Misc. fixes. Date this patch was last updated by Sun : Mar/22/00 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...
Becky Internet Mail Version Detection
This script detects the version of Becky Internet Mail. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Becky! Internet Mail Buffer Overflow Vulnerability
Becky! Internet Mail client is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Becky Internet Mail Version Detection
This script detects the version of Becky Internet Mail and sets the result in KB. OpenVAS Vulnerability Test $Id: gbbeckyinternetmaildetect.nasl 5372 2017-02-20 16:26:11Z cfi $ Becky Internet Mail Version Detection Authors: Nikita MR Copyright: Copyright c 2009 Greenbone Networks GmbH,...