Vulnerability in Mailenable Mailenable_professional
CVE-2006-6964
MailEnable Professional before 1.78 provides a cleartext user password when an administrator edits the user's settings, which allows remote authenticated administrators to obtain sensitive information by viewing the HTML source.
EPSS: 0.010 (57.5th percentile) — read the EPSS interpretation.
Affected products
- Mailenable Mailenable_professional — versions 1.7, 1.71, 1.72
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)