CVE-2025-34421

Summary: CVE-2025-34421 affects MailEnable versions prior to 10.54. An unsafe DLL loading vulnerability occurs when the MailEnable administrative executable loads MEAISP.DLL from its installation directory without proper integrity validation or secure search order, enabling a local attacker with ...

CVE-2025-34401

MailEnable versions prior to 10.54 contain a reflected cross-site scripting XSS vulnerability in the FieldBcc parameter of /Mondo/lang/sys/Forms/AddressBook.aspx. The FieldBcc value is not properly sanitized when processed via a GET request and is reflected inside a block in the JavaScript variab...