Mailenable
Mailenable Professional: vulnerabilidades y CVE
Mailenable Professional tiene 34 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE34
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2008-1277 | Alta (9) | 8.3% | — | 10 mar 2008 | The IMAP service (MEIMAPS.exe) in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allows remote attackers to cause a denial of service (crash) via (1) SEARCH and (2) APPEND commands without… |
| CVE-2008-1275 | Alta (7.8) | 4.0% | — | 10 mar 2008 | Multiple unspecified vulnerabilities in the SMTP service in MailEnable Standard Edition 1.x, Professional Edition 3.x and earlier, and Enterprise Edition 3.x and earlier allow remote attackers to cause a denial of… |
| CVE-2008-1276 | Alta (9) | 7.1% | — | 10 mar 2008 | Multiple buffer overflows in the IMAP service (MEIMAPS.EXE) in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allow remote authenticated attackers to execute arbitrary code via long arguments to… |
| CVE-2007-1301 | Alta (9) | 12% | — | 7 mar 2007 | Stack-based buffer overflow in the IMAP service in MailEnable Enterprise and Professional Editions 2.37 and earlier allows remote authenticated users to execute arbitrary code via a long argument to the APPEND command.… |
| CVE-2007-0652 | Media (5.1) | 1.6% | — | 15 feb 2007 | Cross-site request forgery (CSRF) vulnerability in MailEnable Professional before 2.37 allows remote attackers to modify arbitrary configurations and perform unauthorized actions as arbitrary users via a link or IMG tag. |
| CVE-2007-0651 | Media (4.3) | 3.1% | — | 15 feb 2007 | Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Professional before 2.37 allow remote attackers to inject arbitrary Javascript script via (1) e-mail messages and (2) the ID parameter to (a) right.asp,… |
| CVE-2006-6964 | Media (4) | 1.0% | — | 29 ene 2007 | MailEnable Professional before 1.78 provides a cleartext user password when an administrator edits the user's settings, which allows remote authenticated administrators to obtain sensitive information by viewing the… |
| CVE-2006-6605 | Alta (10) | 5.9% | — | 19 dic 2006 | Stack-based buffer overflow in the POP service in MailEnable Standard 1.98 and earlier; Professional 1.84, and 2.35 and earlier; and Enterprise 1.41, and 2.35 and earlier before ME-10026 allows remote attackers to… |
| CVE-2006-6484 | Media (5) | 3.0% | — | 12 dic 2006 | The IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.34, Professional Edition 1.6 through 1.83, and Enterprise Edition 1.1 through 1.40 allows remote attackers to cause a denial of service… |
| CVE-2006-6423 | Alta (10) | 71% | — | 12 dic 2006 | Stack-based buffer overflow in the IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.35, Professional Edition 1.6 through 1.84, and Enterprise Edition 1.1 through 1.41 allows remote attackers… |
| CVE-2006-6290 | Media (6.5) | 3.3% | — | 5 dic 2006 | Multiple stack-based buffer overflows in the IMAP module (MEIMAPS.EXE) in MailEnable Professional 1.6 through 1.82 and 2.0 through 2.33, and MailEnable Enterprise 1.1 through 1.30 and 2.0 through 2.33 allow remote… |
| CVE-2006-5177 | Alta (9.3) | 7.1% | — | 10 oct 2006 | The NTLM authentication in MailEnable Professional 2.0 and Enterprise 2.0 allows remote attackers to (1) execute arbitrary code via unspecified vectors involving crafted base64 encoded NTLM Type 3 messages, or (2) cause… |
| CVE-2006-5176 | Alta (9.3) | 5.4% | — | 10 oct 2006 | Buffer overflow in NTLM authentication in MailEnable Professional 2.0 and Enterprise 2.0 allows remote attackers to execute arbitrary code via "the signature field of NTLM Type 1 messages". |
| CVE-2006-4616 | Media (5) | 3.5% | — | 7 sept 2006 | SMTP service in MailEnable Standard, Professional, and Enterprise before ME-10014 (20060904) allows remote attackers to cause a denial of service via an SPF lookup for a domain with a large number of records, which… |
| CVE-2006-3277 | Media (5) | 6.1% | — | 28 jun 2006 | The SMTP service of MailEnable Standard 1.92 and earlier, Professional 2.0 and earlier, and Enterprise 2.0 and earlier before the MESMTPC hotfix, allows remote attackers to cause a denial of service (application crash)… |
| CVE-2006-1792 | Alta (10) | 1.8% | — | 15 abr 2006 | Unspecified vulnerability in the POP service in MailEnable Standard Edition before 1.94, Professional Edition before 1.74, and Enterprise Edition before 1.22 has unknown attack vectors and impact related to… |
| CVE-2006-1338 | Media (5) | 2.4% | — | 21 mar 2006 | Webmail in MailEnable Professional Edition before 1.73 and Enterprise Edition before 1.21 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors involving "incorrectly encoded… |
| CVE-2006-0503 | Media (5) | 2.3% | — | 1 feb 2006 | IMAP service in MailEnable Professional Edition before 1.72 allows remote attackers to cause a denial of service (service crash) via unspecified vectors involving the EXAMINE command. |
| CVE-2005-4456 | Alta (7.8) | 7.1% | — | 21 dic 2005 | Multiple buffer overflows in MailEnable Professional 1.71 and Enterprise 1.1 before patch ME-10009 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long (1) LIST, (2)… |
| CVE-2005-4402 | Media (6.5) | 4.3% | — | 20 dic 2005 | Buffer overflow in MailEnable Professional 1.71 and earlier, and Enterprise 1.1 and earlier, allows remote authenticated users to execute arbitrary code via a long IMAP EXAMINE command. |
| CVE-2005-3993 | Alta (7.8) | 1.5% | — | 5 dic 2005 | Multiple unspecified vulnerabilities in MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allow attackers to cause a denial of service (crash) via invalid IMAP commands. |
| CVE-2005-3813 | Media (4) | 3.6% | — | 26 nov 2005 | IMAP service (meimaps.exe) of MailEnable Professional 1.7 and Enterprise 1.1 allows remote authenticated attackers to cause a denial of service (application crash) by using RENAME with a non-existent mailbox, a… |
| CVE-2005-3691 | Media (5) | 1.9% | — | 19 nov 2005 | Directory traversal vulnerability in the IMAP service (meimaps.exe) of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to create or rename arbitrary mail directories via… |
| CVE-2005-3690 | Alta (7.5) | 5.2% | — | 19 nov 2005 | Stack-based buffer overflow in the IMAP service (meimaps.exe) of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to execute arbitrary code via a long mailbox name in the… |
| CVE-2005-3155 | Alta (7.5) | 64% | — | 5 oct 2005 | Buffer overflow in the W3C logging for MailEnable Enterprise 1.1 and Professional 1.6 allows remote attackers to execute arbitrary code. |
| CVE-2005-2278 | Alta (7.2) | 85% | — | 18 jul 2005 | Stack-based buffer overflow in the IMAP daemon (imapd) in MailEnable Professional 1.54 allows remote authenticated users to execute arbitrary code via the status command with a long mailbox name. |
| CVE-2005-2222 | Alta (10) | 1.4% | — | 12 jul 2005 | Unknown vulnerability in the HTTPMail service in MailEnable Professional before 1.6 has unknown impact and attack vectors. |
| CVE-2005-2223 | Media (5) | 51% | — | 12 jul 2005 | Unknown vulnerability in the SMTP service in MailEnable Standard before 1.9 and Professional before 1.6 allows remote attackers to cause a denial of service (crash) during authentication. |
| CVE-2005-1781 | Media (5) | 1.8% | — | 31 may 2005 | Unknown vulnerability in SMTP authentication for MailEnable allows remote attackers to cause a denial of service (crash). |
| CVE-2005-1348 | Alta (7.5) | 73% | — | 2 may 2005 | Buffer overflow in HTTPMail in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote attackers to execute arbitrary code via a long HTTP Authorization header. |