Mailenable Professional Security Vulnerabilities and Issues — Mailenable Professional CVE List

Lucene search

MailenableMailenable Professional

4 matches found

CVE•added 2007/02/15 11:28 p.m.•44 views

CVE-2007-0652

Cross-site request forgery (CSRF) vulnerability in MailEnable Professional before 2.37 allows remote attackers to modify arbitrary configurations and perform unauthorized actions as arbitrary users via a link or IMG tag.

5.1CVSS6.9AI score0.02105EPSS

CVE•added 2007/03/07 12:19 a.m.•40 views

CVE-2007-1301

Stack-based buffer overflow in the IMAP service in MailEnable Enterprise and Professional Editions 2.37 and earlier allows remote authenticated users to execute arbitrary code via a long argument to the APPEND command. NOTE: this is probably different than CVE-2006-6423.

9CVSS7.5AI score0.3773EPSS

CVE•added 2007/01/29 4:28 p.m.•39 views

CVE-2006-6964

MailEnable Professional before 1.78 provides a cleartext user password when an administrator edits the user's settings, which allows remote authenticated administrators to obtain sensitive information by viewing the HTML source.

4CVSS5.8AI score0.00108EPSS

CVE•added 2007/02/15 11:28 p.m.•35 views

CVE-2007-0651

Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Professional before 2.37 allow remote attackers to inject arbitrary Javascript script via (1) e-mail messages and (2) the ID parameter to (a) right.asp, (b) Forms/MAI/list.asp, and (c) Forms/VCF/list.asp in mewebmail/base/default/lan...

4.3CVSS5.9AI score0.02758EPSS