Altn Mdaemon
11 CVEs affecting Altn Mdaemon. Latest disclosed: 2022-05-11. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-27182 | High | 8.8 | 2021-04-14 | An issue was discovered in MDaemon before 20.0.4. There is an IFRAME injection vulnerability in Webmail (aka WorldClient). It can be exploited via an email mes… |
CVE-2021-27181 | High | 8.8 | 2021-04-14 | An issue was discovered in MDaemon before 20.0.4. Remote Administration allows an attacker to perform a fixation of the anti-CSRF token. In order to exploit th… |
CVE-2021-27183 | High | 7.2 | 2021-04-14 | An issue was discovered in MDaemon before 20.0.4. Administrators can use Remote Administration to exploit an Arbitrary File Write vulnerability. An attacker is… |
CVE-2021-27180 | Medium | 6.1 | 2021-04-14 | An issue was discovered in MDaemon before 20.0.4. There is Reflected XSS in Webmail (aka WorldClient). It can be exploited via a GET request. It allows perform… |
CVE-2019-8984 | Medium | 6.1 | 2019-02-21 | MDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (issue 2 of 2). |
CVE-2019-8983 | Medium | 6.1 | 2019-02-21 | MDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (issue 1 of 2). |
CVE-2022-29976 | Medium | 5.4 | 2022-05-11 | An Authenticated Reflected Cross-site scripting at BCC Parameter was discovered in MDaemon before 22.0.0 . |
CVE-2022-29975 | Medium | 5.4 | 2022-05-11 | An Authenticated Reflected Cross-site scripting at CC Parameter was discovered in MDaemon before 22.0.0 . |
CVE-2012-2584 | | 2012-08-12 | Multiple cross-site scripting (XSS) vulnerabilities in Alt-N MDaemon Free 12.5.4 allow remote attackers to inject arbitrary web script or HTML via an e-mail me… | |
CVE-2008-2631 | | 2008-06-10 | The WordClient interface in Alt-N Technologies MDaemon 9.6.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application cra… | |
CVE-2008-1358 | | 2008-03-17 | Stack-based buffer overflow in the IMAP server in Alt-N Technologies MDaemon 9.6.4 allows remote authenticated users to execute arbitrary code via a FETCH comm… |