6 matches found
CVE-2015-1619
Cross-site scripting XSS vulnerability in the Secure Web Mail Client user interface in McAfee Email Gateway MEG 7.6.x before 7.6.3.2, 7.5.x before 75.6, 7.0.x through 7.0.5, 5.6, and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified tokens in Digest...
CVE-2015-1619
CVE-2015-1619 affects McAfee Email Gateway (MEG) Secure Web Mail Client UI. Multiple sources describe an XSS vulnerability in the UI that permits remote authenticated users to inject arbitrary web script or HTML via unspecified tokens in Digest messages. Affected versions include MEG 7.6.x before...
IBM Lotus Domino Notes 6.0/6.5 Mail Template Automatic Script Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14164/info IBM Lotus Notes email client is prone to an input validation vulnerability. Reports indicate that HTML and JavaScript attached to received email messages is executed automatically when the email message is...
MailEnable Web Mail Client Multiple Vulnerabilities (XSS, CSRF)
The Web Mail Client bundled with the version of MailEnable installed on the remote host reportedly fails to properly sanitize email messages and various script parameters of malicious script code, which can lead to cross-site scripting, cross-site request forgery, and script insertion attacks...
[Full-disclosure] Secunia Research: MailEnable Web Mail Client Multiple Vulnerabilities
====================================================================== Secunia Research 14/02/2007 - MailEnable Web Mail Client Multiple Vulnerabilities - ====================================================================== Table of Contents Affected...
IBM Lotus Domino Notes 6.06.5 - Mail Template Automatic Script Execution
IBM Lotus Domino Notes 6.06.5 - Mail Template Automatic Script Execution source: https://www.securityfocus.com/bid/14164/info IBM Lotus Notes email client is prone to an input validation vulnerability. Reports indicate that HTML and JavaScript attached to received email messages is executed...