MDaemon Email Server 19 through 20.0.1 skips SpamAssassin checks by default for e-mail messages larger than 2 MB (and limits checks to 10 MB even with special configuration), which is arguably inconsistent with currently popular message sizes. This might interfere with risk management for malicious...
7.5CVSS
7.4AI Score
0.001EPSS
MDaemon Email Server 17.5.1 allows XSS via the filename of an attachment to an email message.
5.4CVSS
5.2AI Score
0.001EPSS