CVE-2018-6563

Multiple cross-site request forgery CSRF vulnerabilities in totemomail Encryption Gateway before 6.0.0Build371 allow remote attackers to hijack the authentication of users for requests that 1 change user settings, 2 send emails, or 3 change contact information by leveraging lack of an anti-CSRF...

totemomail Encryption Gateway Information Disclosure Vulnerability

totemomail Encryption Gateway is a gateway for email encryption. A security vulnerability exists in versions prior to totemomail Encryption Gateway 6.0b567. A remote attacker can exploit this vulnerability by performing a JSONP hijacking attack to obtain sensitive information about user sessions...

CVE-2018-6562

totemomail Encryption Gateway before 6.0b567 allows remote attackers to obtain sensitive information about user sessions and encryption key material via a JSONP hijacking attack...