CVE-2009-2543

CVE-2009-2543 (and closely related CVE-2009-1240) describes unspecified vulnerabilities in the IBM Proventia engine 4.9.0.0.44 (20081231) used in multiple IBM Proventia products that allow remote attackers to bypass malware detection by presenting modified archive formats (ZIP/CAB or RAR). The co...

CVE-2009-1240

The IBM Proventia engine (version 4.9.0.0.44 20081231) used in multiple IBM products (Network Mail Security System, Virtual Appliance, Desktop Endpoint Security, MFS) is documented to bypass malware detection when processing modified archive files. The related CVE-2009-2543 notes a similar issue ...

CVE-2012-2955

This CVE affects IBM ISS Proventia Mail Security System and Lotus Protector for Mail Security. The vulnerability is cross-site scripting (XSS) in the administrative web interface, where an attacker can inject arbitrary JavaScript/HTML via the HTTP request query string (reflected XSS). This could ...