Skip to content

Atmail vulnerabilities

Products

Newest

atmail Atmail v6.6.0 was discovered to contain a SQL injection vulnerability via the username parameter... CVE-2024-24133 9.8 CriticalFebruary 7, 2024
atmail Atmail 5.62 allows XSS via the mail/parse.php?file=html/$this-%3ELanguage/help/filexp.html... CVE-2022-31200 6.1 MediumJuly 27, 2023
atmail atmail 6.5.0 allows XSS via the index.php/admin/index/ error parameter. CVE-2022-30776 6.1 MediumMay 16, 2022
atmail ** UNSUPPORTED WHEN ASSIGNED ** WebAdmin Control Panel in Atmail 6.5.0 (a version released in... CVE-2021-43574 6.1 MediumNovember 15, 2021
atmail, atmail webmail server +1 more Cross-site scripting (XSS) vulnerability in the administrative interface in Atmail Webmail Server... CVE-2012-2593 Public exploit 6.1 MediumFebruary 6, 2020
atmail Cross-site scripting (XSS) vulnerability in atmail prior to version 7.8.0.2 allows remote... CVE-2017-11617 6.1 MediumJuly 25, 2017
atmail atmail before 7.8.0.2 has CSRF, allowing an attacker to create a user account. CVE-2017-9519 8.8 HighJune 8, 2017
atmail atmail before 7.8.0.2 has CSRF, allowing an attacker to change the SMTP hostname and hijack all... CVE-2017-9518 8.8 HighJune 8, 2017
atmail atmail before 7.8.0.2 has CSRF, allowing an attacker to upload and import users via CSV. CVE-2017-9517 8.8 HighJune 8, 2017
atmail Cross-site scripting (XSS) vulnerability in Atmail Webmail Server 6.6.x before 6.6.3 and 7.0.x... CVE-2013-2585 4.3 MediumFebruary 12, 2014
atmail Multiple cross-site scripting (XSS) vulnerabilities in Atmail Webmail Server 7.0.2 allow remote... CVE-2013-6229 Public exploit 4.3 MediumFebruary 12, 2014
atmail Multiple cross-site request forgery (CSRF) vulnerabilities in Atmail Webmail Server before 7.2... CVE-2013-6028 6.8 MediumJanuary 12, 2014
atmail Cross-site scripting (XSS) vulnerability in Atmail Webmail Server before 7.2 allows remote... CVE-2013-6017 Public exploit 4.3 MediumJanuary 12, 2014
atmail Unspecified vulnerability in Atmail before 6.6.4, and 7.x before 7.1.2, has unknown impact and... CVE-2013-5034 10.0 HighJanuary 12, 2014
atmail Unspecified vulnerability in Atmail before 6.6.4, and 7.x before 7.1.2, has unknown impact and... CVE-2013-5033 10.0 HighJanuary 12, 2014
atmail Unspecified vulnerability in Atmail before 6.6.4, and 7.x before 7.1.2, has unknown impact and... CVE-2013-5032 10.0 HighJanuary 12, 2014
atmail Unspecified vulnerability in Atmail before 6.6.4, and 7.x before 7.1.2, has unknown impact and... CVE-2013-5031 10.0 HighJanuary 12, 2014
atmail open @Mail WebMail Client in AtMail Open-Source 1.04 and earlier allows remote attackers to obtain... CVE-2012-1920 5.0 MediumMarch 27, 2012
atmail open CRLF injection vulnerability in mime.php in @Mail WebMail Client in AtMail Open-Source before 1... CVE-2012-1919 6.4 MediumMarch 27, 2012
atmail open Multiple directory traversal vulnerabilities in (1) compose.php and (2) libs/Atmail/SendMsg.php... CVE-2012-1918 5.0 MediumMarch 27, 2012
atmail open compose.php in @Mail WebMail Client in AtMail Open-Source before 1.05 does not properly handle ..... CVE-2012-1917 5.0 MediumMarch 27, 2012
atmail open @Mail WebMail Client in AtMail Open-Source before 1.05 allows remote attackers to execute... CVE-2012-1916 7.5 HighMarch 27, 2012
atmail open Multiple cross-site scripting (XSS) vulnerabilities in AtMail Open (aka AtMail Open-Source... CVE-2011-4540 Public exploit 4.3 MediumDecember 1, 2011
atmail webmail Cross-site scripting (XSS) vulnerability in index.php in @mail Webmail before 6.2.0 allows remote... CVE-2010-4930 Public exploit 4.3 MediumOctober 9, 2011
atmail \@tmail Multiple cross-site scripting (XSS) vulnerabilities in webadmin/admin.php in @mail 5.6.1 allow... CVE-2009-2455 4.3 MediumJuly 14, 2009
atmail webmail Multiple cross-site scripting (XSS) vulnerabilities in ReadMsg.php in @Mail 5.02 and earlier... CVE-2007-2825 4.3 MediumMay 22, 2007
atmail webmail Cross-site scripting (XSS) vulnerability in atmail.php in @Mail 5.0 allows remote attackers to... CVE-2007-2153 6.8 MediumApril 19, 2007
atmail webmail Cross-site scripting (XSS) vulnerability in search.pl in @Mail 4.61 and earlier allows remote... CVE-2007-0953 4.3 MediumFebruary 15, 2007
atmail webadmin Cross-site scripting (XSS) vulnerability in the Webadmin in @Mail before 4.6 allows remote... CVE-2006-6704 6.8 MediumDecember 23, 2006
atmail webmail Cross-site scripting (XSS) vulnerability in Global.pm in @Mail before 4.61 allows remote... CVE-2006-6702 6.8 MediumDecember 23, 2006
atmail webmail Cross-site request forgery (CSRF) vulnerability in util.pl in @Mail WebMail 4.51, and util.php in... CVE-2006-6701 7.5 HighDecember 23, 2006
atmail Directory traversal vulnerability in compose.pl in @Mail 4.3 and earlier for Windows allows... CVE-2006-0611 7.5 HighFebruary 9, 2006