248 matches found
CVE-2006-3817
Cross-site scripting XSS vulnerability in Novell GroupWise WebAccess 6.5 and 7 before 20060727 allows remote attackers to inject arbitrary web script or HTML via an encoded SCRIPT element in an e-mail message with the UTF-7 character set, as demonstrated by the "+ADw-SCRIPT+AD4-" sequence...
Critical: Red Hat Security Advisory: thunderbird security update
Updated thunderbird packages that fix several security bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. The Mozilla Foundation...
Critical: Red Hat Security Advisory: thunderbird security update
Updated thunderbird packages that fix various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 24 Apr 2006 The erratum text has been updated to include the details of additional issu...
galeon, mozilla security update
CentOS Errata and Security Advisory CESA-2006:0329-01 Updated mozilla packages that fix several security bugs are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 24 Apr 2006 The erratum text has been updated to include th...
CVE-2006-0842
Cross-site scripting XSS vulnerability in Calacode @Mail 4.3 allows remote attackers to inject arbitrary web script or HTML via a modified javascript: string in the SRC attribute of an IMG element in an e-mail message, as demonstrated by "javascript:." NOTE: the provenance of this information is...
CVE-2006-0487
Multiple unspecified vulnerabilities in Tumbleweed MailGate Email Firewall EMF 6.x allow remote attackers to 1 trigger temporarily incorrect processing of an e-mail message under "extremely heavy loads" and 2 cause an "increased number of missed spam" during "spam outbreaks."...
Design/Logic Flaw
Multiple unspecified vulnerabilities in Tumbleweed MailGate Email Firewall EMF 6.x allow remote attackers to 1 trigger temporarily incorrect processing of an e-mail message under "extremely heavy loads" and 2 cause an "increased number of missed spam" during "spam outbreaks."...
CVE-2005-1987
Buffer overflow in Collaboration Data Objects CDO, as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to execute arbitrary code when CDOSYS or CDOEX processes an e-mail message with a large header name, as demonstrated using the "Content-Type" string...
CVE-2005-2820
Cross-site scripting XSS vulnerability in SqWebMail 5.0.4 allows remote attackers to inject arbitrary web script or HTML via an e-mail message containing Internet Explorer "Conditional Comments" such as "if" and "endif"...
CVE-2005-2820
Cross-site scripting XSS vulnerability in SqWebMail 5.0.4 allows remote attackers to inject arbitrary web script or HTML via an e-mail message containing Internet Explorer "Conditional Comments" such as "if" and "endif"...
clamav -- MS-Expand file handling DoS vulnerability
An iDEFENSE Security Advisory reports: Remote exploitation of an input validation error in Clam AntiVirus ClamAV allows attackers to cause a denial of service condition. The vulnerability specifically exists due to improper behavior during exceptional conditions. Successful exploitation allows...
CVE-2002-1893
Cross-site scripting XSS vulnerability in ArGoSoft Mail Server Pro 1.8.1.9 allows remote attackers to inject arbitrary web script or HTML via the e-mail message...
CVE-2005-1769
Multiple cross-site scripting XSS vulnerabilities in SquirrelMail 1.4.0 through 1.4.4 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in 1 the URL or 2 an e-mail message...
CVE-2005-1769
Multiple cross-site scripting XSS vulnerabilities in SquirrelMail 1.4.0 through 1.4.4 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in 1 the URL or 2 an e-mail message...
CVE-2001-1456
Buffer overflow in the 1 smap/smapd and 2 CSMAP daemons for Gauntlet Firewall 5.0 through 6.0 allows remote attackers to execute arbitrary code via a crafted mail message...
CVE-2004-1468
CVE-2004-1468 affects Webmin 1.x and Usermin 1.x. The webmail feature contains an input validation bug that allows a remote attacker to execute arbitrary commands by sending specially crafted e-mails with shell metacharacters, leading to remote code execution with the privileges of the Webmin/Use...
CVE-2004-2703
Clearswift MIMEsweeper 5.0.5, when it has been upgraded from MAILsweeper for SMTP version 4.3 or MAILsweeper Business Suite I or II, allows remote attackers to bypass scanning by including encrypted data in a mail message, which causes the message to be marked as "Clean" instead of "Encrypted"...
CVE-2004-2719
Buffer overflow in the UrlToLocal function in PunyLib.dll of Foxmail 5.0.300 allows remote attackers to execute arbitrary code via a mail message with a long From field, a different issue than CVE-2005-0339...
