Axigen Mail Server vulnerabilities

• axigen mail server Axigen Mail Server before 10.5.57 contains multiple stored Cross-Site Scripting (XSS)... CVE-2025-68723 Public exploit 9.0 CriticalFebruary 5, 2026
• axigen mail server Axigen Mail Server before 10.5.57 and 10.6.x before 10.6.26 contains a Cross-Site Request Forgery... CVE-2025-68722 Public exploit 8.8 HighFebruary 5, 2026
• axigen mail server Axigen Mail Server before 10.5.57 contains an improper access control vulnerability in the... CVE-2025-68721 Public exploit 8.1 HighFebruary 5, 2026
• axigen mail server Axigen Mail Server before 10.5.57 allows stored Cross-Site Scripting (XSS) in the handling of the... CVE-2025-68643 5.4 MediumFebruary 5, 2026
• axigen mail server Persistent and reflected XSS vulnerabilities in the themeMode cookie and _h URL parameter of... CVE-2024-50601 6.1 MediumNovember 11, 2024
• axigen mail server An issue was discovered in Axigen Mail Server for Windows versions 10.5.18 and before, allows... CVE-2024-28589 Public exploit 6.7 MediumApril 3, 2024
• axigen mail server An issue discovered in Axigen Mail Server 10.3.x before 10.3.1.27 and 10.3.2.x before 10.3.3.1... CVE-2020-26942 9.1 CriticalMarch 6, 2024
• axigen mail server Cross Site Scripting vulnerability in Axigen WebMail v.10.5.7 and before allows a remote attacker... CVE-2023-48974 Public exploit 9.6 CriticalFebruary 8, 2024
• axigen mail server A 2-Step Verification problem in Axigen 10.3.3.52 allows an attacker to access a mailbox by... CVE-2023-23566 9.8 CriticalJanuary 13, 2023
• axigen mail server Cross-site scripting (XSS) vulnerability in actions.hsp in the Ajax WebMail interface in AXIGEN... CVE-2015-5379 5.4 MediumOctober 23, 2017
• axigen mail server Cross-site scripting (XSS) vulnerability in Axigen Mail Server 8.0.1 allows remote attackers to... CVE-2012-2592 Public exploit 4.3 MediumJune 18, 2014