CVE-2020-12619

MailMate before 1.11 automatically imported S/MIME certificates and silently replaced existing ones, enabling a MITM attacker to obtain an email-validated S/MIME certificate from a trusted CA and replace the public key of the entity to be impersonated, thereby decrypting future communications. Th...

CVE-2018-15588

CVE-2018-15588 affects MailMate prior to 1.11.3, which mishandles a suspicious HTML/MIME structure in a signed/encrypted email. CVSSv3.0 base score 7.5 (High) with high integrity impact, network attack vector, low complexity, no privileges required.