CVE-2025-44148

Cross Site Scripting XSS vulnerability in MailEnable before v10 allows a remote attacker to execute arbitrary code via the failure.aspx component...

CVE-2025-44148

A Reflected Cross-Site Scripting (XSS) vulnerability exists in MailEnable versions prior to v10 . The flaw stems from improper user input sanitization and a lack of effective filtering or escaping of user-supplied data within the failure.aspx component. Specifically, an attacker can inject arbitr...

PT-2025-23636

Name of the Vulnerable Software and Affected Versions MailEnable versions prior to 10 Description A Cross Site Scripting XSS issue allows a remote attacker to execute arbitrary code via the "failure.aspx" component. Recommendations For versions prior to 10, update to version 10 or later to resolv...

CVE-2025-44148

Cross Site Scripting XSS vulnerability in MailEnable before v10 allows a remote attacker to execute arbitrary code via the failure.aspx component...

MailEnable 安全漏洞

MailEnable is a commercial email server software designed for Windows operating systems that provides end-to-end email hosting and collaboration solutions. MailEnable suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied da...

CVE-2025-44148: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in MailEnable before v10 allows a remote attacker to execute arbitrary code via the failure.aspx component...

CVE-2025-44148

Cross Site Scripting XSS vulnerability in MailEnable before v10 allows a remote attacker to execute arbitrary code via the failure.aspx component...

CVE-2002-2357

MailEnable 1.5 015 through 1.5 018 allows remote attackers to cause a denial of service crash via a long USER string, possibly due to a buffer overflow...

CVE-2006-6997

Unspecified vulnerability in a cryptographic feature in MailEnable Standard Edition before 1.93, Professional Edition before 1.73, and Enterprise Edition before 1.21 leads to "weakened authentication security" with unknown impact and attack vectors. NOTE: due to lack of details, it is not clear...

CVE-2004-2726

HTTPMail service in MailEnable Professional 1.18 does not properly handle arguments to the Authorization header, which allows remote attackers to cause a denial of service null dereference and application crash. NOTE: This is a different vulnerability than CVE-2005-1348...

CVE-2005-2222

Unknown vulnerability in the HTTPMail service in MailEnable Professional before 1.6 has unknown impact and attack vectors...

CVE-2005-2223

Unknown vulnerability in the SMTP service in MailEnable Standard before 1.9 and Professional before 1.6 allows remote attackers to cause a denial of service crash during authentication...

CVE-2005-1781

Unknown vulnerability in SMTP authentication for MailEnable allows remote attackers to cause a denial of service crash...

CVE-2006-1792

Unspecified vulnerability in the POP service in MailEnable Standard Edition before 1.94, Professional Edition before 1.74, and Enterprise Edition before 1.22 has unknown attack vectors and impact related to "authentication exploits". NOTE: this is a different set of affected versions, and probabl...

mailenable.com Cross Site Scripting vulnerability OBB-3686962

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MailEnable Detection Consolidation

Consolidation of MailEnable detections. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.149596";...

MailEnable Detection (SMTP)

SMTP based detection of MailEnable. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.149597";...

MailEnable Detection (POP3)

POP3 based detection of MailEnable. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.149598";...

MailEnable Detection (IMAP)

IMAP based detection of MailEnable. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.149599";...

MailEnable Detection (HTTP)

HTTP based detection of MailEnable. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.149595";...