CVE-2026-44400 | High | 8.1 | 2026-05-08 | MailEnable Enterprise Premium 10.55 and earlier contains an improper authorization vulnerability in the WebAdmin mobile portal that allows attackers to bypass… |
CVE-2026-32852 | Medium | 6.1 | 2026-03-23 | MailEnable versions prior to 10.55 contain a reflected cross-site scripting vulnerability in the webmail interface that allows remote attackers to execute arbi… |
CVE-2026-32851 | Medium | 6.1 | 2026-03-23 | MailEnable versions prior to 10.55 contain a reflected cross-site scripting vulnerability in the webmail interface that allows remote attackers to execute arbi… |
CVE-2026-32850 | Medium | 6.1 | 2026-03-23 | MailEnable versions prior to 10.55 contain a reflected cross-site scripting vulnerability in the webmail interface that allows remote attackers to execute arbi… |
CVE-2025-34428 | High | 7.8 | 2025-12-10 | MailEnable versions prior to 10.54 contain a cleartext storage of credentials vulnerability that can lead to local credential compromise and account takeover… |
CVE-2025-34427 | High | 7.8 | 2025-12-10 | MailEnable versions prior to 10.54 contain a cleartext storage of credentials vulnerability that can lead to local credential compromise and account takeover… |
CVE-2025-34424 | High | 7.8 | 2025-12-10 | MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative e… |
CVE-2025-34423 | High | 7.8 | 2025-12-10 | MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative e… |
CVE-2025-34422 | High | 7.8 | 2025-12-10 | MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative e… |
CVE-2025-34421 | High | 7.8 | 2025-12-10 | MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative e… |
CVE-2025-34420 | High | 7.8 | 2025-12-10 | MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative e… |
CVE-2025-34419 | High | 7.8 | 2025-12-10 | MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative e… |
CVE-2025-34418 | High | 7.8 | 2025-12-10 | MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative e… |
CVE-2025-34417 | High | 7.8 | 2025-12-10 | MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative e… |
CVE-2025-34416 | High | 7.8 | 2025-12-10 | MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative e… |
CVE-2025-34425 | Medium | 6.1 | 2025-12-09 | MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the WindowContext parameter of /Mondo/lang/sys/Forms/MAI/com… |
CVE-2025-34409 | Medium | 6.1 | 2025-12-09 | MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the Failed parameter of /Mondo/lang/sys/Forms/MAI/AddRecipie… |
CVE-2025-34408 | Medium | 6.1 | 2025-12-09 | MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the Added parameter of /Mondo/lang/sys/Forms/MAI/AddRecipien… |
CVE-2025-34407 | Medium | 6.1 | 2025-12-09 | MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the theme parameter of /Mondo/lang/sys/Forms/Statistics.aspx… |
CVE-2025-34406 | Medium | 6.1 | 2025-12-09 | MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the Id parameter of /Mobile/ContactDetails.aspx. The Id valu… |
CVE-2025-34404 | Medium | 6.1 | 2025-12-09 | MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the InstanceScope parameter of /Mondo/lang/sys/Forms/CAL/com… |
CVE-2025-34403 | Medium | 6.1 | 2025-12-09 | MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the FieldTo parameter of /Mondo/lang/sys/Forms/AddressBook.a… |
CVE-2025-34402 | Medium | 6.1 | 2025-12-09 | MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the FieldCc parameter of /Mondo/lang/sys/Forms/AddressBook.a… |
CVE-2025-34401 | Medium | 6.1 | 2025-12-09 | MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the FieldBcc parameter of /Mondo/lang/sys/Forms/AddressBook… |
CVE-2025-34400 | Medium | 6.1 | 2025-12-09 | MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the AddressesTo parameter of /Mondo/lang/sys/Forms/AddressBo… |
CVE-2025-34399 | Medium | 6.1 | 2025-12-09 | MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the AddressesCc parameter of /Mondo/lang/sys/Forms/AddressBo… |
CVE-2025-34398 | Medium | 6.1 | 2025-12-09 | MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the AddressesBcc parameter of /Mondo/lang/sys/Forms/AddressB… |
CVE-2025-34397 | Medium | 6.1 | 2025-12-09 | MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the Message parameter of /Mobile/Compose.aspx. The Message v… |
CVE-2025-34396 | High | 7.3 | 2025-12-09 | MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative e… |
CVE-2025-44148 | Critical | 9.8 | 2025-06-03 | Cross Site Scripting (XSS) vulnerability in MailEnable before v10 allows a remote attacker to execute arbitrary code via the failure.aspx component |
CVE-2022-42136 | High | 8.8 | 2023-01-13 | Authenticated mail users, under specific circumstances, could add files with unsanitized content in public folders where the IIS user had permission to access… |
CVE-2019-12927 | Medium | 6.1 | 2019-07-08 | MailEnable Enterprise Premium 10.23 was vulnerable to stored and reflected cross-site scripting (XSS) attacks. Because the session cookie did not use the HttpO… |
CVE-2019-12926 | High | 8.8 | 2019-07-08 | MailEnable Enterprise Premium 10.23 did not use appropriate access control checks in a number of areas. As a result, it was possible to perform a number of act… |
CVE-2019-12925 | High | 8.1 | 2019-07-08 | MailEnable Enterprise Premium 10.23 was vulnerable to multiple directory traversal issues, with which authenticated users could add, remove, or potentially rea… |
CVE-2019-12924 | Critical | 9.8 | 2019-07-08 | MailEnable Enterprise Premium 10.23 was vulnerable to XML External Entity Injection (XXE) attacks that could be exploited by an unauthenticated user. It was po… |
CVE-2019-12923 | Medium | 6.5 | 2019-07-08 | In MailEnable Enterprise Premium 10.23, the potential cross-site request forgery (CSRF) protection mechanism was not implemented correctly and it was possible… |
CVE-2015-9280 | Critical | 10.0 | 2019-01-16 | MailEnable before 8.60 allows XXE via an XML document in the request.aspx Options parameter. |
CVE-2015-9279 | Medium | 6.1 | 2019-01-16 | MailEnable before 8.60 allows Stored XSS via malformed use of "<img/src" with no ">" character in the body of an e-mail message. |
CVE-2015-9278 | Critical | 9.8 | 2019-01-16 | MailEnable before 8.60 allows Privilege Escalation because admin accounts could be created as a consequence of %0A mishandling in AUTH.TAB after a password-cha… |
CVE-2015-9277 | Critical | 9.1 | 2019-01-16 | MailEnable before 8.60 allows Directory Traversal for reading the messages of other users, uploading files, and deleting files because "/../" and "/.. /" are m… |
CVE-2012-2588 | | | 2014-09-19 | Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Enterprise 6.5 allow remote attackers to inject arbitrary web script or HTML via the (1) From… |
CVE-2012-0389 | | | 2012-01-24 | Cross-site scripting (XSS) vulnerability in ForgottenPassword.aspx in MailEnable Professional, Enterprise, and Premium 4.26 and earlier, 5.x before 5.53, and 6… |
CVE-2010-2580 | | | 2010-09-15 | The SMTP service (MESMTPC.exe) in MailEnable 3.x and 4.25 does not properly perform a length check, which allows remote attackers to cause a denial of service… |
CVE-2008-3449 | | | 2008-08-04 | MailEnable Professional 3.5.2 and Enterprise 3.52 allow remote attackers to cause a denial of service (crash) via multiple IMAP connection requests to the same… |
CVE-2008-1277 | | | 2008-03-10 | The IMAP service (MEIMAPS.exe) in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allows remote attackers to cause a denial of service… |
CVE-2008-1276 | | | 2008-03-10 | Multiple buffer overflows in the IMAP service (MEIMAPS.EXE) in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allow remote authenticat… |
CVE-2008-1275 | | | 2008-03-10 | Multiple unspecified vulnerabilities in the SMTP service in MailEnable Standard Edition 1.x, Professional Edition 3.x and earlier, and Enterprise Edition 3.x a… |
CVE-2007-1301 | | | 2007-03-07 | Stack-based buffer overflow in the IMAP service in MailEnable Enterprise and Professional Editions 2.37 and earlier allows remote authenticated users to execut… |
CVE-2007-0652 | | | 2007-02-15 | Cross-site request forgery (CSRF) vulnerability in MailEnable Professional before 2.37 allows remote attackers to modify arbitrary configurations and perform u… |
CVE-2007-0651 | | | 2007-02-15 | Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Professional before 2.37 allow remote attackers to inject arbitrary Javascript script via (1)… |
CVE-2007-0955 | | | 2007-02-15 | The NTLM_UnPack_Type3 function in MENTLM.dll in MailEnable Professional 2.35 and earlier allows remote attackers to cause a denial of service (application cras… |
CVE-2006-6997 | | | 2007-02-12 | Unspecified vulnerability in a cryptographic feature in MailEnable Standard Edition before 1.93, Professional Edition before 1.73, and Enterprise Edition befor… |
CVE-2006-6964 | | | 2007-01-29 | MailEnable Professional before 1.78 provides a cleartext user password when an administrator edits the user's settings, which allows remote authenticated admin… |
CVE-2006-6605 | | | 2006-12-19 | Stack-based buffer overflow in the POP service in MailEnable Standard 1.98 and earlier; Professional 1.84, and 2.35 and earlier; and Enterprise 1.41, and 2.35… |
CVE-2006-6484 | | | 2006-12-12 | The IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.34, Professional Edition 1.6 through 1.83, and Enterprise Edition 1.1 through… |
CVE-2006-6423 | | | 2006-12-12 | Stack-based buffer overflow in the IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.35, Professional Edition 1.6 through 1.84, and… |
CVE-2006-6291 | | | 2006-12-05 | Stack overflow in the IMAP module (MEIMAPS.EXE) in MailEnable Professional 1.6 through 1.83 and 2.0 through 2.33, and MailEnable Enterprise 1.1 through 1.40 an… |
CVE-2006-6290 | | | 2006-12-05 | Multiple stack-based buffer overflows in the IMAP module (MEIMAPS.EXE) in MailEnable Professional 1.6 through 1.82 and 2.0 through 2.33, and MailEnable Enterpr… |
CVE-2006-6239 | | | 2006-12-03 | webadmin in MailEnable NetWebAdmin Professional 2.32 and Enterprise 2.32 allows remote attackers to authenticate using an empty password. |
CVE-2006-5177 | | | 2006-10-10 | The NTLM authentication in MailEnable Professional 2.0 and Enterprise 2.0 allows remote attackers to (1) execute arbitrary code via unspecified vectors involvi… |
CVE-2006-5176 | | | 2006-10-10 | Buffer overflow in NTLM authentication in MailEnable Professional 2.0 and Enterprise 2.0 allows remote attackers to execute arbitrary code via "the signature f… |
CVE-2006-4616 | | | 2006-09-07 | SMTP service in MailEnable Standard, Professional, and Enterprise before ME-10014 (20060904) allows remote attackers to cause a denial of service via an SPF lo… |
CVE-2006-3277 | | | 2006-06-28 | The SMTP service of MailEnable Standard 1.92 and earlier, Professional 2.0 and earlier, and Enterprise 2.0 and earlier before the MESMTPC hotfix, allows remote… |
CVE-2006-1792 | | | 2006-04-15 | Unspecified vulnerability in the POP service in MailEnable Standard Edition before 1.94, Professional Edition before 1.74, and Enterprise Edition before 1.22 h… |
CVE-2006-1338 | | | 2006-03-21 | Webmail in MailEnable Professional Edition before 1.73 and Enterprise Edition before 1.21 allows remote attackers to cause a denial of service (CPU consumption… |
CVE-2006-1337 | | | 2006-03-21 | Buffer overflow in the POP 3 (POP3) service in MailEnable Standard Edition before 1.93, Professional Edition before 1.73, and Enterprise Edition before 1.21 al… |
CVE-2006-0504 | | | 2006-02-01 | Unspecified vulnerability in MailEnable Enterprise Edition before 1.2 allows remote attackers to cause a denial of service (CPU utilization) by viewing "format… |
CVE-2006-0503 | | | 2006-02-01 | IMAP service in MailEnable Professional Edition before 1.72 allows remote attackers to cause a denial of service (service crash) via unspecified vectors involv… |
CVE-2005-4457 | | | 2005-12-21 | MailEnable Enterprise 1.1 before patch ME-10009 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via several "… |
CVE-2005-4456 | | | 2005-12-21 | Multiple buffer overflows in MailEnable Professional 1.71 and Enterprise 1.1 before patch ME-10009 allow remote attackers to cause a denial of service (crash)… |
CVE-2005-4402 | | | 2005-12-20 | Buffer overflow in MailEnable Professional 1.71 and earlier, and Enterprise 1.1 and earlier, allows remote authenticated users to execute arbitrary code via a… |
CVE-2005-3993 | | | 2005-12-05 | Multiple unspecified vulnerabilities in MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allow attackers to cause a denial of service (cr… |
CVE-2005-3813 | | | 2005-11-26 | IMAP service (meimaps.exe) of MailEnable Professional 1.7 and Enterprise 1.1 allows remote authenticated attackers to cause a denial of service (application cr… |
CVE-2005-3691 | | | 2005-11-19 | Directory traversal vulnerability in the IMAP service (meimaps.exe) of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote att… |
CVE-2005-3690 | | | 2005-11-19 | Stack-based buffer overflow in the IMAP service (meimaps.exe) of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers… |
CVE-2005-3155 | | | 2005-10-05 | Buffer overflow in the W3C logging for MailEnable Enterprise 1.1 and Professional 1.6 allows remote attackers to execute arbitrary code. |
CVE-2005-2278 | | | 2005-07-18 | Stack-based buffer overflow in the IMAP daemon (imapd) in MailEnable Professional 1.54 allows remote authenticated users to execute arbitrary code via the stat… |
CVE-2005-2223 | | | 2005-07-12 | Unknown vulnerability in the SMTP service in MailEnable Standard before 1.9 and Professional before 1.6 allows remote attackers to cause a denial of service (c… |
CVE-2005-2222 | | | 2005-07-12 | Unknown vulnerability in the HTTPMail service in MailEnable Professional before 1.6 has unknown impact and attack vectors. |
CVE-2005-1781 | | | 2005-05-31 | Unknown vulnerability in SMTP authentication for MailEnable allows remote attackers to cause a denial of service (crash). |
CVE-2005-1348 | | | 2005-05-02 | Buffer overflow in HTTPMail in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote attackers to execute arbitrary code via a… |
CVE-2005-1015 | | | 2005-05-02 | Buffer overflow in MailEnable Imapd (MEIMAP.exe) allows remote attackers to execute arbitrary code via a long LOGIN command. |
CVE-2005-1014 | | | 2005-05-02 | Buffer overflow in the IMAP service for MailEnable Enterprise 1.04 and earlier and Professional 1.54 allows remote attackers to execute arbitrary code via a lo… |
CVE-2005-1013 | | | 2005-05-02 | The SMTP service in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote attackers to cause a denial of service (server crash… |
CVE-2005-0804 | | | 2005-05-02 | Format string vulnerability in MailEnable 1.8 allows remote attackers to cause a denial of service (application crash) via format string specifiers in the mail… |
CVE-2004-2727 | | | 2004-12-31 | Buffer overflow in MEHTTPS (HTTPMail) of MailEnable Professional 1.5 through 1.7 allows remote attackers to cause a denial of service (application crash) via a… |
CVE-2004-2726 | | | 2004-12-31 | HTTPMail service in MailEnable Professional 1.18 does not properly handle arguments to the Authorization header, which allows remote attackers to cause a denia… |
CVE-2004-2501 | | | 2004-12-31 | Buffer overflow in the IMAP service of MailEnable Professional Edition 1.52 and Enterprise Edition 1.01 allows remote attackers to execute arbitrary code via (… |
CVE-2004-2194 | | | 2004-12-31 | MailEnable Professional Edition before 1.53 and Enterprise Edition before 1.02 allows remote attackers to cause a denial of service (crash) via malformed (1) S… |
CVE-2002-2357 | | | 2002-12-31 | MailEnable 1.5 015 through 1.5 018 allows remote attackers to cause a denial of service (crash) via a long USER string, possibly due to a buffer overflow. |