EUVD-2026-125598

PMail 2.5.0 through 2.9.8 contains a stored cross-site scripting vulnerability that allows authenticated users to inject scripts by sending unsanitized HTML through /api/email/send. Attackers can embed event-handler payloads like img onerror that execute when administrators view the message,...

EUVD-2026-125599

PMail 2.9.1 through 2.9.8 contains a stored cross-site scripting vulnerability because the /attachments/id/cid endpoint returns email attachments verbatim with the sender-supplied Content-Type after cid: references are rewritten into attachment links. Unauthenticated SMTP senders can email a...

CVE-2026-129168

PMail versions 2.9.1 through 2.9.8 are vulnerable to a stored cross-site scripting (XSS) flaw. The issue resides in the /attachments/{id}/{cid} endpoint, which returns email attachments verbatim using the sender-supplied Content-Type after rewriting cid: references into links. This allows unauthe...

CVE-2026-129169

PMail versions 2.5.0 through 2.9.8 are vulnerable to a stored cross-site scripting (XSS) vulnerability via the /api/email/send endpoint. The root cause is the processing of unsanitized HTML in the email body, which allows authenticated users to inject malicious scripts. These scripts can execute ...

EUVD-2012-1409

Malware in sbrugna...

CVE-2012-1384

Unspecified vulnerability in the NetEase Pmail com.netease.rpmms application 0.5.0 and 0.5.2 for Android has unknown impact and attack vectors...

CVE-2017-9046

CVE-2017-9046 affects Pegasus Mail (winpm-32.exe) v4.72 build 572. A DLL load flaw in ssgp.dll on the desktop enables remote via a crafted DLL to execute code when a user clicks a mailto: link from a remote page. Exploitation relies on locally installed ssgp.dll; DllMain is the execution point. M...

CVE-2012-1384

Unspecified vulnerability in the NetEase Pmail com.netease.rpmms application 0.5.0 and 0.5.2 for Android has unknown impact and attack vectors...

CVE-2012-1384

Unspecified vulnerability in the NetEase Pmail com.netease.rpmms application 0.5.0 and 0.5.2 for Android has unknown impact and attack vectors...

Design/Logic Flaw

Unspecified vulnerability in the NetEase Pmail com.netease.rpmms application 0.5.0 and 0.5.2 for Android has unknown impact and attack vectors...

CVE-2012-1384

Technical details are not publicly available in the provided documents. No affected products, vectors, or impact are specified here; monitor for updates.

CVE-2012-1384

Unspecified vulnerability in the NetEase Pmail com.netease.rpmms application 0.5.0 and 0.5.2 for Android has unknown impact and attack vectors...

CVE-2012-1384: Undefined Security Weakness

Unspecified vulnerability in the NetEase Pmail com.netease.rpmms application 0.5.0 and 0.5.2 for Android has unknown impact and attack vectors...

PT-2012-3213

Name of the Vulnerable Software and Affected Versions NetEase Pmail com.netease.rpmms versions 0.5.0 through 0.5.2 Description The issue concerns an unspecified vulnerability in the NetEase Pmail application for Android. Details about the impact and attack vectors of this issue are not provided...

CVE-2009-3838

Pegasus Mail (PMail) is reported vulnerable to a stack‑based buffer overflow in its POP3 response handling. A long error message from remote POP3 servers may crash PMail (DoS) and, per some sources, could allow arbitrary code execution. Affected versions cited are 4.41 and possibly 4.51. Public r...

CVE-2009-3838: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Pegasus Mail PMail 4.41 and possibly 4.51 allows remote POP3 servers to cause a denial of service application crash or possibly execute arbitrary code via a long error message...