PT-2017-13246

Name of the Vulnerable Software and Affected Versions Trend Micro ScanMail for Exchange version 12.0 Description A vulnerability exists in certain specific installations of Trend Micro ScanMail for Exchange that utilize the uncommon feature 'Other Update Sources', which could be exploited to...

Trend Micro ScanMail for Exchange 12.x < SP1 Patch 1 CP1755

The version of Trend Micro ScanMail for Exchange SMEX installed on the remote Windows host is affected by multiple vulnerabilities, including cross-site scripting XSS and weak anti cross-site request forgery CSRF. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid104354...

Trend Micro ScanMail for Exchange 10.2 < Build 3318 / 11.x < Build 4180 Predictable Session IDs

The version of Trend Micro ScanMail for Exchange SMEX installed on the remote Windows host is affected by a flaw in its bundled web-based user interface due to insufficient complexity in the generation of session IDs. A remote attacker, by more easily guessing the session ID, can use an...

Trend Micro ScanMail for Microsoft Exchange Authentication Bypass Vulnerability

Trend Micro ScanMail for Microsoft Exchange is a virus scanning program for Exchange mail servers. Trend Micro ScanMail for Microsoft Exchange SMEX prior to 10.2 Hot Fix Build 3318 and prior to 11.0 Hot Fix Build 4180 uses a guessable random number generator to generate the session ID of the WEB...

PT-2015-6153

Name of the Vulnerable Software and Affected Versions Trend Micro ScanMail for Microsoft Exchange SMEX versions 10.2 before Hot Fix Build 3318 Trend Micro ScanMail for Microsoft Exchange SMEX versions 11.0 before Hot Fix Build 4180 Description The issue allows remote attackers to bypass...

CVE-2015-3326: Undefined Security Weakness

Trend Micro ScanMail for Microsoft Exchange SMEX 10.2 before Hot Fix Build 3318 and 11.0 before Hot Fix Build 4180 creates session IDs for the web console using a random number generator with predictable values, which makes it easier for remote attackers to bypass authentication via a brute force...

Trend Micro ScanMail for Domino 2.51/2.6 - Remote File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11612/info ScanMail for Domino is reported prone to a vulnerability that may allow sensitive configuration files to be disclosed to remote attackers. A successful attack may allow an attacker to disclose sensitive...

CVE-2003-1343: Improper Authentication

Trend Micro ScanMail for Exchange SMEX before 3.81 and before 6.1 might install a back door account in smgSmxcfg30.exe, which allows remote attackers to gain access to the web management interface via the vcc parameter, possibly "3560121183d3"...

CVE-2003-1343

Trend Micro ScanMail for Exchange SMEX before 3.81 and before 6.1 might install a back door account in smgSmxcfg30.exe, which allows remote attackers to gain access to the web management interface via the vcc parameter, possibly "3560121183d3"...

Trend Micro ScanMail For Exchange 3.8 - Authentication Bypass

Trend Micro ScanMail For Exchange 3.8 - Authentication Bypass source: https://www.securityfocus.com/bid/6619/info A vulnerability has been reported for ScanMail for Microsoft Exchange. The vulnerability allows a remote attacker to bypass existing authentication mechanisms and obtain access to...

Softek MailMarshal 4 / Trend Micro ScanMail 1.0 - SMTP Attachment Protection Bypass

source: https://www.securityfocus.com/bid/3097/info At least two SMTP gateway products have been identified which contain flaws in the handling of restricted filetypes as attachments. An attacker can insert extraneous characters in the filename extension of a hostile attachment. The affected...