Mailwise Security Vulnerabilities and Issues — Mailwise CVE List

Lucene search

CybozuMailwise

14 matches found

CVE•added 2006/08/31 10:4 p.m.•77 views

CVE-2006-4491

Directory traversal vulnerability in Cybozu Collaborex, AG before 1.2(1.5), AG Pocket before 5.2(0.8), Mailwise before 3.0(0.3), and Garoon 1 before 1.5(4.1) allows remote authenticated users to read arbitrary files via unspecified vectors.

4CVSS6.6AI score0.01506EPSS

CVE•added 2011/06/29 5:55 p.m.•49 views

CVE-2011-1334

Cross-site scripting (XSS) vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through 2.1.3, Cybozu Dezie before 6.1, Cybozu MailWise before 3.1, and Cybozu Collaborex before 1.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to "downloading graphic files from...

4.3CVSS5.7AI score0.00516EPSS

CVE•added 2018/06/26 2:29 p.m.•49 views

CVE-2018-0558

Reflected cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML in 'System settings' via unspecified vectors.

6.1CVSS5.9AI score0.00238EPSS

CVE•added 2014/11/24 2:59 a.m.•48 views

CVE-2014-5314

Buffer overflow in Cybozu Office 9 and 10 before 10.1.0, Mailwise 4 and 5 before 5.1.4, and Dezie 8 before 8.1.1 allows remote authenticated users to execute arbitrary code via e-mail messages.

9CVSS7.7AI score0.06103EPSS

CVE•added 2017/04/20 6:59 p.m.•48 views

CVE-2016-4842

Cybozu Mailwise before 5.4.0 allows remote attackers to obtain information on when an email is read.

4.3CVSS4.7AI score0.00359EPSS

CVE•added 2017/04/20 6:59 p.m.•43 views

CVE-2016-4844

Cybozu Mailwise before 5.4.0 allows remote attackers to conduct clickjacking attacks.

4.3CVSS4.9AI score0.00672EPSS

CVE•added 2013/04/25 10:55 a.m.•38 views

CVE-2013-2305

Cross-site request forgery (CSRF) vulnerability in Cybozu Office before 8.1.6 and 9.x before 9.3.0, Cybozu Dezie before 8.0.7, and Cybozu Mailwise before 5.0.4 allows remote attackers to hijack the authentication of arbitrary users for requests that change passwords.

6.8CVSS7.3AI score0.00142EPSS

CVE•added 2019/01/09 11:29 p.m.•38 views

CVE-2018-0702

Directory traversal vulnerability in Cybozu Mailwise 5.0.0 to 5.4.5 allows remote attackers to delete arbitrary files via unspecified vectors.

7.5CVSS7.4AI score0.00903EPSS

CVE•added 2020/05/29 9:15 a.m.•37 views

CVE-2020-5572

Android App 'Mailwise for Android' 1.0.0 to 1.0.1 allows an attacker to obtain credential information registered in the product via unspecified vectors.

4.6CVSS4.3AI score0.00063EPSS

CVE•added 2017/04/20 6:59 p.m.•36 views

CVE-2016-4843

Cybozu Mailwise before 5.4.0 allows remote attackers to obtain sensitive cookie information.

6.5CVSS6.4AI score0.00932EPSS

CVE•added 2018/06/26 2:29 p.m.•35 views

CVE-2018-0557

Stored cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'E-mail Details Screen' via unspecified vectors.

6.1CVSS5.8AI score0.00238EPSS

CVE•added 2018/06/26 2:29 p.m.•33 views

CVE-2018-0559

Cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'Address' via unspecified vectors.

6.1CVSS6AI score0.00238EPSS

CVE•added 2013/08/16 1:55 a.m.•32 views

CVE-2013-4698

Cybozu Mailwise 5.0.4 and 5.0.5 allows remote authenticated users to obtain sensitive e-mail content intended for different persons in opportunistic circumstances by reading Subject header lines within the user's own mailbox.

3.5CVSS6.3AI score0.00225EPSS

CVE•added 2017/04/21 2:59 p.m.•32 views

CVE-2016-4841

Cybozu Mailwise before 5.4.0 allows remote attackers to inject arbitrary email headers.

4.3CVSS5AI score0.00672EPSS