CVE-2024-58272

...

CVE-2025-59715

SMSEagle before 6.11 allows reflected XSS via a username or contact phone number...

DEBIAN-CVE-2008-2667

SQL injection vulnerability in the Courier Authentication Library aka courier-authlib before 0.60.6 on SUSE openSUSE 10.3 and 11.0, and other platforms, when MySQL and a non-Latin character set are used, allows remote attackers to execute arbitrary SQL commands via the username and unspecified...