CVE-2022-37238 | Medium | 5.4 | 2022-08-25 | MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the currentRequest parameter. |
CVE-2022-37245 | Medium | 5.4 | 2022-08-25 | MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the Blacklist endpoint. |
CVE-2022-37244 | Medium | 5.4 | 2022-08-25 | MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to IFRAME Injectionvia the currentRequest parameter. after login leads to inject mal… |
CVE-2022-37243 | Medium | 5.4 | 2022-08-25 | MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the whitelist endpoint. |
CVE-2022-37242 | Critical | 9.8 | 2022-08-25 | MDaemon Technologies SecurityGateway for Email Servers 8.5.2, is vulnerable to HTTP Response splitting via the data parameter. |
CVE-2022-37241 | Medium | 5.4 | 2022-08-25 | MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the data_leak_list_ajax endpoint. |
CVE-2022-37240 | Critical | 9.8 | 2022-08-25 | MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to HTTP Response splitting via the format parameter. |
CVE-2022-37239 | Medium | 5.4 | 2022-08-25 | MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the rulles_list_ajax endpoint. |
CVE-2022-29976 | Medium | 5.4 | 2022-05-11 | An Authenticated Reflected Cross-site scripting at BCC Parameter was discovered in MDaemon before 22.0.0 . |
CVE-2022-29975 | Medium | 5.4 | 2022-05-11 | An Authenticated Reflected Cross-site scripting at CC Parameter was discovered in MDaemon before 22.0.0 . |
CVE-2022-25356 | Medium | 5.3 | 2022-04-05 | Alt-N MDaemon Security Gateway through 8.5.0 allows SecurityGateway.dll?view=login XML Injection. |
CVE-2021-27183 | High | 7.2 | 2021-04-14 | An issue was discovered in MDaemon before 20.0.4. Administrators can use Remote Administration to exploit an Arbitrary File Write vulnerability. An attacker is… |
CVE-2021-27182 | High | 8.8 | 2021-04-14 | An issue was discovered in MDaemon before 20.0.4. There is an IFRAME injection vulnerability in Webmail (aka WorldClient). It can be exploited via an email mes… |
CVE-2021-27181 | High | 8.8 | 2021-04-14 | An issue was discovered in MDaemon before 20.0.4. Remote Administration allows an attacker to perform a fixation of the anti-CSRF token. In order to exploit th… |
CVE-2021-27180 | Medium | 6.1 | 2021-04-14 | An issue was discovered in MDaemon before 20.0.4. There is Reflected XSS in Webmail (aka WorldClient). It can be exploited via a GET request. It allows perform… |
CVE-2020-18724 | Medium | 5.4 | 2021-02-03 | Authenticated stored cross-site scripting (XSS) in the contact name field in the distribution list of MDaemon webmail 19.5.5 allows an attacker to executes cod… |
CVE-2020-18723 | Medium | 5.4 | 2021-02-03 | Stored cross-site scripting (XSS) in file attachment field in MDaemon webmail 19.5.5 allows an attacker to execute code on the email recipient side while forwa… |
CVE-2019-19497 | Medium | 5.4 | 2019-12-17 | MDaemon Email Server 17.5.1 allows XSS via the filename of an attachment to an email message. |
CVE-2018-17792 | High | 8.8 | 2019-07-19 | MDaemon Webmail (formerly WorldClient) has CSRF. |
CVE-2019-13612 | High | 7.5 | 2019-07-16 | MDaemon Email Server 19 through 20.0.1 skips SpamAssassin checks by default for e-mail messages larger than 2 MB (and limits checks to 10 MB even with special… |
CVE-2019-8984 | Medium | 6.1 | 2019-02-21 | MDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (issue 2 of 2). |
CVE-2019-8983 | Medium | 6.1 | 2019-02-21 | MDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (issue 1 of 2). |
CVE-2012-2584 | | | 2012-08-12 | Multiple cross-site scripting (XSS) vulnerabilities in Alt-N MDaemon Free 12.5.4 allow remote attackers to inject arbitrary web script or HTML via an e-mail me… |
CVE-2008-2631 | | | 2008-06-10 | The WordClient interface in Alt-N Technologies MDaemon 9.6.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application cra… |
CVE-2008-1358 | | | 2008-03-17 | Stack-based buffer overflow in the IMAP server in Alt-N Technologies MDaemon 9.6.4 allows remote authenticated users to execute arbitrary code via a FETCH comm… |