Smartermail Security Vulnerabilities and Issues — Smartermail CVE List

Lucene search

SmartertoolsSmartermail

5 matches found

CVE•added 2021/07/06 12:15 a.m.•95 views

CVE-2021-32233

SmarterTools SmarterMail before Build 7776 allows XSS.

6.1CVSS6.3AI score0.00285EPSS

CVE•added 2021/11/17 5:15 p.m.•35 views

CVE-2021-43977

SmarterTools SmarterMail 16.x through 100.x before 100.0.7803 allows XSS.

6.1CVSS6.2AI score0.00526EPSS

CVE•added 2019/04/24 3:29 p.m.•29 views

CVE-2019-7211

SmarterTools SmarterMail 16.x before build 6995 has stored XSS. JavaScript code could be executed on the application by opening a malicious email or when viewing a malicious file attachment.

6.1CVSS6.3AI score0.00359EPSS

CVE•added 2019/04/24 3:29 p.m.•28 views

CVE-2019-7213

SmarterTools SmarterMail 16.x before build 6985 allows directory traversal. An authenticated user could delete arbitrary files or could create files in new folders in arbitrary locations on the mail server. This could lead to command execution on the server for instance by putting files inside the ...

6.5CVSS6.6AI score0.13974EPSS

CVE•added 2019/01/16 4:29 p.m.•26 views

CVE-2015-9276

SmarterTools SmarterMail before 13.3.5535 was vulnerable to stored XSS by bypassing the anti-XSS mechanisms. It was possible to run JavaScript code when a victim user opens or replies to the attacker's email, which contained a malicious payload. Therefore, users' passwords could be reset by using a...

6.1CVSS6.1AI score0.00301EPSS