Clearswift

26 CVEs across 6 Clearswift products. Browse Clearswift vulnerabilities, severities, and proof-of-concept exploits.

Clearswift products with known CVEs

ProductCVEs
Mailsweeper17
Mailsweeper For Smtp5
Mimesweeper For Web5
Mailsweeper For Exchange2
Mailsweeper Business Suite I1
Mailsweeper Business Suite Ii1
Clearswift CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2006-35232006-07-12Clearswift MIMEsweeper for Web before 5.1.15 Hotfix allows remote attackers to cause a denial of service (crash) via an encrypted archived .RAR file, which tri…
CVE-2006-35222006-07-12Cross-site scripting (XSS) vulnerability in Clearswift MIMEsweeper for Web before 5.1.15 Hotfix allows remote attackers to inject arbitrary web script or HTML…
CVE-2006-32162006-06-24Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to cause a denial of service via (1) non-ASCII…
CVE-2006-32152006-06-24Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to bypass the "text analysis", possibly bypass…
CVE-2005-45262005-12-28Clearswift MIMEsweeper For Web (a.k.a. WEBsweeper) 4.0 through 5.1 allows remote attackers to bypass filtering via a URL that does not include a .exe extension…
CVE-2004-27032004-12-31Clearswift MIMEsweeper 5.0.5, when it has been upgraded from MAILsweeper for SMTP version 4.3 or MAILsweeper Business Suite I or II, allows remote attackers to…
CVE-2004-23282004-12-31Clearswift MAILsweeper for SMTP before 4.3_13 allows remote attackers to cause a denial of service (infinite loop) via an e-mail with a crafted RAR archive att…
CVE-2004-01622004-10-20Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME encapsulation that uses RFC822 comment…
CVE-2004-01612004-10-20Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use RFC2231 encoding, whi…
CVE-2004-00532004-10-20Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use fields that use RFC20…
CVE-2004-00522004-10-20Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard separato…
CVE-2004-00512004-10-20Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard but freq…
CVE-2003-10162004-10-20Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use malformed quoting in…
CVE-2003-10152004-10-20Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use whitespace in an unus…
CVE-2003-10142004-10-20Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use multiple MIME fields…
CVE-2003-09302004-09-28Clearswift MAILsweeper before 4.3.15 does not properly detect filenames in BinHex (HQX) encoded files, which allows remote attackers to bypass intended policy.
CVE-2003-09292004-09-28Clearswift MAILsweeper before 4.3.15 does not properly detect and filter ZIP 6.0 encoded files, which allows remote attackers to bypass intended policy.
CVE-2003-09282004-09-28Clearswift MAILsweeper before 4.3.15 does not properly detect and filter RAR 3.20 encoded files, which allows remote attackers to bypass intended policy.
CVE-2004-02352004-08-18Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filename…
CVE-2004-02342004-08-18Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote at…
CVE-2004-17152004-08-11Directory traversal vulnerability in MIMEsweeper for Web before 5.0.4 allows remote attackers or local users to read arbitrary files via "..\\", "..\", and sim…
CVE-2003-14852003-12-31Clearswift MAILsweeper 4.0 through 4.3.7 allows remote attackers to bypass filtering via a file attachment that contains "multiple extensions combined with lar…
CVE-2003-14772003-12-31MAILsweeper for SMTP 4.3.6 and 4.3.7 allows remote attackers to cause a denial of service (CPU consumption) via a PowerPoint attachment that either (1) is corr…
CVE-2003-11542003-12-31MAILsweeper for SMTP 4.3 allows remote attackers to bypass virus protection via a mail message with a malformed zip attachment, as exploited by certain MIMAIL…
CVE-2003-01212003-03-18Clearswift MAILsweeper 4.x allows remote attackers to bypass attachment detection via an attachment that does not specify a MIME-Version header field, which is…
CVE-2000-09322000-12-19MAILsweeper for SMTP 3.x does not properly handle corrupt CDA documents in a ZIP file and hangs, which allows remote attackers to cause a denial of service.