CVE-2017-17752

CVE-2017-17752 affects Ability Mail Server 3.3.2 from Code-Crafters Software UK. The vulnerability is a cross-site scripting (XSS) flaw that can be triggered via the body of an email and results in JavaScript execution on the Read Mail screen (the /_readmail URI). Affected component is the mail v...

CVE-2019-9557

CVE-2019-9557 : Ability Mail Server 4.2.6 is affected by a Persistent Cross-Site Scripting (XSS) vulnerability in the email body. An attacker can inject JavaScript within an iframe in the body of an email, requiring the victim to open the message for the exploit to trigger. Public materials (incl...