Unfixed XSS vulnerability at www.dalnegro.it

Security researcher T0T4L, has submitted on 25/06/2007 a cross-site-scripting XSS vulnerability affecting www.dalnegro.it, which at the time of submission ranked 760235 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/06/2007. It is currently...

CVE-2007-3209

Mail Notification 4.0, when WITHSSL is set to 0 at compile time, uses unencrypted connections for accounts configured with SSL/TLS, which allows remote attackers to obtain sensitive information by sniffing the network...

Design/Logic Flaw

Mail Notification 4.0, when WITHSSL is set to 0 at compile time, uses unencrypted connections for accounts configured with SSL/TLS, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2007-3209

Mail Notification 4.0, when WITHSSL is set to 0 at compile time, uses unencrypted connections for accounts configured with SSL/TLS, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2007-3209

Mail Notification 4.0 is affected: if built with WITH_SSL=0, it uses unencrypted connections for SSL/TLS accounts, enabling remote attackers to sniff network traffic and obtain sensitive information. No remediation details are provided in the supplied documents.

CVE-2007-3209

Mail Notification 4.0, when WITHSSL is set to 0 at compile time, uses unencrypted connections for accounts configured with SSL/TLS, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2007-3209

Removed by vendor...

Unfixed XSS vulnerability at www.ukleader.org.uk

Security researcher Hotpockets, has submitted on 18/05/2007 a cross-site-scripting XSS vulnerability affecting www.ukleader.org.uk, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/05/2007. It is...

Unfixed XSS vulnerability at arnaldorodriguez.com

Security researcher cr0xip, has submitted on 04/08/2007 a cross-site-scripting XSS vulnerability affecting arnaldorodriguez.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/08/2007. It is currentl...

Unfixed XSS vulnerability at hr.cch.com

Security researcher MaXWeL, has submitted on 16/03/2007 a cross-site-scripting XSS vulnerability affecting hr.cch.com, which at the time of submission ranked 37478 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/03/2007. It is currently...

Unfixed XSS vulnerability at www.programlama.com

Security researcher DarkToxic, has submitted on 13/02/2007 a cross-site-scripting XSS vulnerability affecting www.programlama.com, which at the time of submission ranked 78403 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/02/2007. It is...

Unfixed XSS vulnerability at www.tr.cx

Security researcher THE-SH0CK-B0Y, has submitted on 02/05/2007 a cross-site-scripting XSS vulnerability affecting www.tr.cx, which at the time of submission ranked 20330 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/05/2007. It is currentl...

FreeBSD : mail-notification -- denial-of-service vulnerability (100)

The following package needs to be updated: mail-notification %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg3030ae221c7f11d981a40050fc56d258.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML :...

mail-notification -- denial-of-service vulnerability

Caused by an untested return value, and a resulting null pointer dereference, it is possible for an attacker to crash the application. However, the attacker must first hijack the connection between Mail Notification and the Gmail or IMAP server...

CVE-2000-0087

Netscape Mail Notification nsnotify utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Communicator to use an SSL connection, allowing a remote attacker to sniff usernames and passwords in plaintext...

CVE-2000-0087

Netscape Mail Notification nsnotify utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Communicator to use an SSL connection, allowing a remote attacker to sniff usernames and passwords in plaintext...