249 matches found
CVE-2004-2586
CVE-2004-2586 applies to SmarterTools SmarterMail 1.6.1511 and 1.6.1529, where a directory traversal flaw in frmGetAttachment.aspx allows remote attackers to read arbitrary files via the filename parameter. Root cause: insufficient input validation leading to path traversal. The available sources...
CVE-2004-2585
The CVE-2004-2585 entry affects SmarterTools SmarterMail 1.6.1511 and 1.6.1529, where the XSS flaw occurs in frmCompose.aspx, allowing remote attackers to inject arbitrary script/HTML via Javascript in the compose area's “check spelling” feature. The vulnerability arises from how user-supplied in...
CVE-2004-2587
Vulnerability summary for CVE-2004-2587: SmarterTools SmarterMail versions 1.6.1511 and 1.6.1529 are affected. The issue lies in login.aspx, where a long txtusername parameter can be used by a remote attacker to cause a denial of service (potentially via a buffer overflow).Impact is limited to av...
CVE-2004-2583
The CVE-2004-2583 entry describes a denial-of-service condition in SmarterTools SmarterMail (versions 1.6.1511 and 1.6.1529) where remote attackers can cause high CPU usage by opening a large number of simultaneous connections to TCP port 25. The available sources confirm the affected product and...
CVE-2004-2586
Directory traversal vulnerability in frmGetAttachment.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to read arbitrary files via the filename parameter...
CVE-2004-2583
SMTP service in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to cause a denial of service CPU consumption via a large number of simultaneous open connections to TCP port 25...
CVE-2004-2586
Directory traversal vulnerability in frmGetAttachment.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to read arbitrary files via the filename parameter...
CVE-2004-2585
Cross-site scripting XSS vulnerability in frmCompose.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to inject arbitrary web script or HTML via Javascript to the "check spelling" feature in the compose area...