Hastymail
7 CVEs across 2 Hastymail products. Browse Hastymail vulnerabilities, severities, and proof-of-concept exploits.
Hastymail products with known CVEs
Hastymail CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2011-4542 | | | 2011-11-30 | Hastymail2 2.1.1 before RC2 allows remote attackers to execute arbitrary commands via the (1) rs or (2) rsargs[] parameter in a mailbox Drafts action to the de… |
CVE-2011-4541 | | | 2011-11-29 | Cross-site scripting (XSS) vulnerability in index.php in Hastymail2 2.1.1 before RC2 allows remote attackers to inject arbitrary web script or HTML via the rs… |
CVE-2010-4646 | | | 2011-01-18 | Cross-site scripting (XSS) vulnerability in Hastymail2 before 1.01 allows remote attackers to inject arbitrary web script or HTML via a crafted background attr… |
CVE-2009-5051 | | | 2011-01-18 | Hastymail2 before RC 8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cook… |
CVE-2006-5313 | | | 2006-10-17 | Hastymail 1.5 and earlier before 20061008 allows remote authenticated users to send arbitrary SMTP commands by placing them after a CRLF.CRLF sequence in the s… |
CVE-2006-5262 | | | 2006-10-12 | CRLF injection vulnerability in lib/session.php in Hastymail 1.5 and earlier before 20061008 allows remote authenticated users to send arbitrary IMAP commands… |
CVE-2004-2704 | | | 2004-12-31 | Hastymail 1.0.1 and earlier (stable) and 1.1 and earlier (development) does not send the "attachment" parameter in the Content-Disposition field for attachment… |