IBOS open source latest version of MailController.php page actionIndex function has SQL injection vulnerability

IBOS Enterprise Collaboration Management Software is a PHP-based collaborative office management system. An SQL injection vulnerability exists in the actionIndex function on the MailController.php page of IBOS Enterprise Collaboration Management Software. An attacker is allowed to exploit the...

Secure Mail for Windows unable to connect to the backend exchange server.

Secure Mail for WindowsPhone does not work when entering Credentials the App states "Access to your company network is not currently available" Android and iOS devices are working fine and are able to connect to Secure Mail. Direct native mail clients are accessible...

IceWarp Mail Server Cross-Site Scripting Vulnerability (CNVD-2017-29528)

IceWarp Mail Server is a mail server product from IceWarp USA. The product supports email archiving, SmartAttach attachments, automatic migration and more. A cross-site scripting vulnerability exists in the administration panel of IceWarp Mail Server version 10.4.4. A remote attacker can exploit...

CVE-2017-12844

Cross-site scripting XSS vulnerability in the admin panel in IceWarp Mail Server 10.4.4 allows remote authenticated domain administrators to inject arbitrary web script or HTML via a crafted user name...

CVE-2017-12844

Cross-site scripting XSS vulnerability in the admin panel in IceWarp Mail Server 10.4.4 allows remote authenticated domain administrators to inject arbitrary web script or HTML via a crafted user name...

Cross site scripting

Cross-site scripting XSS vulnerability in the admin panel in IceWarp Mail Server 10.4.4 allows remote authenticated domain administrators to inject arbitrary web script or HTML via a crafted user name...

CVE-2017-12844

Cross-site scripting XSS vulnerability in the admin panel in IceWarp Mail Server 10.4.4 allows remote authenticated domain administrators to inject arbitrary web script or HTML via a crafted user name...

CVE-2017-12844

Cross-site scripting XSS vulnerability in the admin panel in IceWarp Mail Server 10.4.4 allows remote authenticated domain administrators to inject arbitrary web script or HTML via a crafted user name...

CVE-2017-12844

IceWarp Mail Server 10.4.4 is affected by a Cross-site scripting (XSS) vulnerability in the admin panel. The flaw allows remote authenticated domain administrators to inject arbitrary web script or HTML via a specially crafted username. Documented impact is limited to injection into admin UI; no ...

Remote Code Execution (RCE)

zend-mail is vulnerable to remote code execution RCE attacks. The library does not properly sanitize input, allowing a malicious user to inject and execute arbitrary code using a \ character...

Allow Secure Mail to open links to iOS passbook (wallet)

Unable to connect to the Secure Mail iOS to iOS wallet...

Apache Pony Mail Security Bypass Vulnerability

Apache Pony Mail is a plugin with mail archiving, viewing and interaction features. A security vulnerability exists in Apache Pony Mail that allows an attacker to submit special requests to bypass authentication...

Authentication flaw

Apache Pony Mail 0.6c through 0.8b allows remote attackers to bypass authentication...

CVE-2016-4460

Apache Pony Mail 0.6c through 0.8b allows remote attackers to bypass authentication...

CVE-2016-4460

Apache Pony Mail 0.6c through 0.8b allows remote attackers to bypass authentication...

CVE-2016-4460

Apache Pony Mail 0.6c through 0.8b allows remote attackers to bypass authentication...

CVE-2016-4460

Apache Pony Mail versions 0.6c through 0.8b are affected by a vulnerability that allows remote attackers to bypass authentication. The reports consolidate this as a security bypass without detailing the underlying root cause in the provided documents. No remediation steps, patch versions, or expl...

After updating the app, receiving an error : Incompatible error

After updating the app Secure Mail, receiving an error when launching apps. Devices: iOS only ERROR: "Incompatible app, please try removing this app and then reinstalling it."...

Cybozu Garoon Cross-Site Scripting Vulnerability (CNVD-2017-25383)

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin boards, document management, and other functions, and supports free switching among three languages Chinese, Japanese, and English. A cross-site scripting...

Updated clamav packages fix security vulnerabilities

It was discovered that ClamAV incorrectly handled parsing certain e-mail messages. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service CVE-2017-6418. It was discovered that ClamAV incorrectly handled parsing certain PE files with WWPack...