CVE-2006-3523: Undefined Security Weakness

Clearswift MIMEsweeper for Web before 5.1.15 Hotfix allows remote attackers to cause a denial of service crash via an encrypted archived .RAR file, which triggers a scan error and causes the Web Policy Engine service to terminate...

mimesweeperXSS.txt

This is a multi-part message in MIME format. ------=NextPart00101C6A369.3FE6BA2F Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable =20 MIMESweeper For Web 5.X Cross Site Scripting =20 =20 I. INTRODUCTION =20 MIMESweeper For Web is a policy-based content...

CVE-2006-3522: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Clearswift MIMEsweeper for Web before 5.1.15 Hotfix allows remote attackers to inject arbitrary web script or HTML via the URL, which is reflected back in an error message when trying to access a blocked web site...

CVE-2005-4526: Undefined Security Weakness

Clearswift MIMEsweeper For Web a.k.a. WEBsweeper 4.0 through 5.1 allows remote attackers to bypass filtering via a URL that does not include a .exe extension but returns an executable file...

CVE-2004-1715

CVE-2004-1715 describes a directory traversal vulnerability in MIMEsweeper for Web (pre-5.0.4). The flaw allows reading arbitrary files via dot-dot sequences like "..\" or ".." in the URL, potentially impacting remote attackers or local users. The connected documents confirm the affected product ...

CVE-2004-1715: Undefined Security Weakness

Directory traversal vulnerability in MIMEsweeper for Web before 5.0.4 allows remote attackers or local users to read arbitrary files via "..\", "..", and similar dot dot sequences in the URL...