CVE-2026-6351 | High | 7.5 | 2026-04-16 | MailGates/MailAudit developed by Openfind has a CRLF Injection vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read s… |
CVE-2026-6350 | Critical | 9.8 | 2026-04-16 | MailGates/MailAudit developed by Openfind has a Stack-based Buffer Overflow vulnerability, allowing unauthenticated remote attackers to control the program's e… |
CVE-2024-6741 | Medium | 5.8 | 2024-07-15 | Openfind's Mail2000 has a vulnerability that allows the HttpOnly flag to be bypassed. Unauthenticated remote attackers can exploit this vulnerability using spe… |
CVE-2024-6740 | Medium | 6.1 | 2024-07-15 | Openfind's Mail2000 does not properly validate email atachments, allowing unauthenticated remote attackers to inject JavaScript code within the attachment and… |
CVE-2024-6739 | Medium | 5.3 | 2024-07-15 | The session cookie in MailGates and MailAudit from Openfind does not have the HttpOnly flag enabled, allowing remote attackers to potentially steal the session… |
CVE-2024-6048 | Critical | 9.8 | 2024-06-17 | Openfind's MailGates and MailAudit fail to properly filter user input when analyzing email attachments. An unauthenticated remote attacker can exploit this vul… |
CVE-2024-5400 | High | 8.8 | 2024-05-27 | Openfind Mail2000 does not properly filter parameters of specific CGI. Remote attackers with regular privileges can exploit this vulnerability to execute arbit… |
CVE-2024-5399 | High | 7.2 | 2024-05-27 | Openfind Mail2000 does not properly filter parameters of specific API. Remote attackers with administrative privileges can exploit this vulnerability to execut… |
CVE-2023-28705 | Medium | 5.4 | 2023-06-02 | Openfind Mail2000 has insufficient filtering special characters of email content of its content filtering function. A remote attacker can exploit this vulnerab… |
CVE-2023-22902 | Medium | 5.4 | 2023-03-27 | Openfind Mail2000 file uploading function has insufficient filtering for user input. An authenticated remote attacker with general user privilege can exploit t… |
CVE-2020-25849 | High | 8.8 | 2020-11-01 | MailGates and MailAudit products contain Command Injection flaw, which can be used to inject and execute system commands from the cgi parameter after attackers… |
CVE-2020-12776 | Medium | 6.6 | 2020-09-01 | Openfind Mail2000 contains Broken Access Control vulnerability, which can be used to execute unauthorized commands after attackers obtain the administrator acc… |
CVE-2020-12782 | Critical | 9.8 | 2020-06-23 | Openfind MailGates contains a Command Injection flaw, when receiving email with specific strings, malicious code in the mail attachment will be triggered and g… |
CVE-2019-15073 | Medium | 6.1 | 2019-11-20 | An Open Redirect vulnerability for all browsers in MAIL2000 through version 6.0 and 7.0, which will redirect to a malicious site without authentication. This v… |
CVE-2019-15072 | Medium | 6.1 | 2019-11-20 | The login feature in "/cgi-bin/portal" in MAIL2000 through version 6.0 and 7.0 has a cross-site scripting (XSS) vulnerability, allowing execution of arbitrary… |
CVE-2019-15071 | Medium | 6.1 | 2019-11-20 | The "/cgi-bin/go" page in MAIL2000 through version 6.0 and 7.0 has a cross-site scripting (XSS) vulnerability, allowing execution of arbitrary code via ACTION… |
CVE-2019-9763 | Medium | 6.1 | 2019-06-19 | An issue was discovered in Openfind Mail2000 6.0 and 7.0 Webmail. XSS can occur via an '<object data="data:text/html' substring in an e-mail message (The vendo… |