CVE-2008-0838

The CVE-2008-0838 entry covers multiple cross-site scripting (XSS) vulnerabilities in Sophos ES1000 and ES4000 Email Security Appliance 2.1.0.0 web administration interface. The XSS can be triggered via the login page using the (1) error and (2) go parameters, allowing remote attackers to inject ...

CVE-2008-0838

Multiple cross-site scripting XSS vulnerabilities in the web administration interface in Sophos ES1000 and ES4000 Email Security Appliance 2.1.0.0 allow remote attackers to inject arbitrary web script or HTML via the 1 error and 2 go parameters to the login page...

[INFIGO-2008-02-13]: SOPHOS Email Security Appliance Cross Site Scripting Vulnerability

INFIGO IS Security Advisory ADV-2008-02-13 http://www.infigo.hr/en/ Title: SOPHOS Email Security Appliance Cross Site Scripting Vulnerability Advisory ID: INFIGO-2008-02-13 Date: 2008-02-13 Advisory URL: http://www.infigo.hr/en/infocus/advisories/INFIGO-2008-02-13 Impact: Malicious JavaScript Cod...

SOPHOS Email Security Appliance crossite scripting

Administration interface crossite scripting...

INFIGO-2008-02-13.txt

INFIGO IS Security Advisory ADV-2008-02-13 http://www.infigo.hr/en/ Title: SOPHOS Email Security Appliance Cross Site Scripting Vulnerability Advisory ID: INFIGO-2008-02-13 Date: 2008-02-13 Advisory URL: http://www.infigo.hr/en/infocus/advisories/INFIGO-2008-02-13 Impact: Malicious JavaScript Cod...

CVE-2007-5094

The CVE pertains to Ipswitch IMail Server (8.01–8.11) where a heap-based buffer overflow in iaspam.dll within the SMTP Server can be triggered by συγκεκριed malformed Content-Type headers (long boundary parameter, a lone “MIME” line, and long Content-Transfer-Encoding lines). This allows remote c...

Symantec Client Security Internet E-mail Auto-Protect Stack Overflow

SUMMARY A stack overflow in Symantec Anti-Virus Corporate Editions Internet Email Auto-Protect feature could potentially crash the Internet Email scanning feature. Severity Low Remote Access | No ---|--- Local Access | Yes Authentication Required | Yes Exploit publicly available | No AFFECTED...

CVE-2007-1713

BASP21 (and BASP21 Pro) contains a CRLF/mail header injection flaw in bsmtp.dll (and related executable components) prior to specific versions. An unauthenticated remote attacker can inject arbitrary SMTP headers into messages by exploiting CRLF sequences in Subject lines, potentially altering th...

CVE-2006-5877

The CVE-2006-5877 entry concerns the Enigmail extension prior to 0.94.2, which does not properly handle large, encrypted email attachments. This defect can allow remote attackers to cause a denial of service (crash), as demonstrated with Mozilla Thunderbird. The available connected documents corr...

Microsoft Internet Explorer fails to properly interpret certain responses from FTP servers

Overview A vulnerability in the way Microsoft Internet Explorer handles responses from FTP servers may lead to execution of arbitrary code. Description Microsoft Internet Explorer contains an unspecified vulnerability that could be exploited when it attempts to interpret responses from FTP server...

CVE-2006-1305

CVE-2006-1305 affects Microsoft Outlook 2000, 2002, and 2003. The vulnerability is a denial-of-service caused by how Outlook processes malformed e-mail header information (e.g., long subject lines or many recipients in To/CC), leading to memory exhaustion and interrupted mail recovery. CERT/NVD e...

Enthrallweb eCoupons 1.0 - 'myprofile.asp' Remote Pass Change

PASSWORD: Change Profile UserName= FIRST: LAST: tr va...

Know thyself commonly used to hack Email accounts of three methods-vulnerability warning-the black bar safety net

E-mail is not secure, in the mail sending, transmitting and receiving the whole process of each link is there may be a weak link, a malicious user if the use of their vulnerability, it is possible to easily hack the account to get mail content. One, the use of the mail serveroperating...

QK SMTP远程栈溢出漏洞

QK SMTP Server是一款SMTP（简单邮件传输协议）服务器软件。 QK SMTP Server在处理用户命令参数时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 QK SMTP Server在处理传送给“RCPT TO:”命令的参数时存在栈溢出漏洞，远程攻击者可以通过向服务器发送超长参数导致执行任意指令。 QKSoft QK SMTP 3.1.0 Beta QKSoft QK SMTP 3.0.1 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.qksoft.com/ /...

Microsoft Word Mac Remote Code Execution Vulnerability

Description Microsoft Word for Mac is prone to a remote code-execution vulnerability when parsing Word files. Exploiting this vulnerability may allow an attacker to execute arbitrary machine code in the context of the user who opened the file. An attacker could leverage this issue to gain the...

Microsoft Outlook Express 6.00.2800.1409

INFIGO IS Security Advisory ADV-2006-08-04 http://www.infigo.hr/ Title: MDaemon POP3 server remote buffer overflow preauth Advisory ID: INFIGO-2006-08-04 Date: 2006-08-21 Advisory URL: http://www.infigo.hr/en/infocus/advisories/INFIGO-2006-08-04 Impact: Remote code execution preauth Risk Level:...

CVE-2006-3901

The CVE-2006-3901 issue affects Tumbleweed Email Firewall (EMF). Multiple stack-based buffer overflows in EMF’s handling of LHA archives allow remote attackers to execute arbitrary code via an email attachment containing an LHA archive with (1) a long extended header for a file, (2) a long extend...

Teach you powerful crack E-mail passwords of three methods-vulnerability warning-the black bar safety net

E-mail is not secure, in the mail sending, transmitting and receiving the whole process of each link is there may be a weak link, a malicious user if the use of their vulnerability, it is possible to easily hack the account to get mail content. First, the use of the mail serveroperating...

Yahoo! Mail script injection vulnerability

Overview A script injection vulnerability exists in Yahoo! Mail. Description Yahoo! Mail is vulnerable to script injection. Specifically, Yahoo! Mail fails to properly filter the body of email messages for script code. If a remote attacker can persuade a user to open a specially crafted email...

Microsoft DXImageTransform.Microsoft.Light ActiveX Control Remote Code Execution Vulnerability

Description The DXImageTransform.Microsoft.Light ActiveX control is prone to remote code execution. An attacker could exploit this issue to execute code in the context of the user visiting a malicious web page. Technologies Affected Microsoft Internet Explorer 5.0.1 Microsoft Internet Explorer...