CVE-2015-9280

MailEnable before 8.60 is vulnerable to an XML External Entity (XXE) attack via an XML document in the request.aspx Options parameter, per CVE-2015-9280. The vulnerability affects MailEnable's handling of XML in that parameter and can lead to high-severity impact, with CVSSv3.1 base score 10.0 (C...