Mailenable vulnerabilities

Products

• Mailenable 50
• Professional 33
• Enterprise 29
• Standard 7

Newest

• mailenable, mailenable enterprise premium +1 more MailEnable Enterprise Premium < 10.55 Authorization Bypass via WebAdmin CVE-2026-44400 8.7 HighMay 8, 2026
• mailenable MailEnable < 10.55 Reflected XSS via FreeBusy.aspx StartDate Parameter CVE-2026-32852 5.1 MediumMarch 23, 2026
• mailenable MailEnable < 10.55 Reflected XSS via FreeBusy.aspx StartDate Parameter CVE-2026-32851 5.1 MediumMarch 23, 2026
• mailenable MailEnable < 10.55 Reflected XSS via ManageShares.aspx SelectedIndex Parameter CVE-2026-32850 5.1 MediumMarch 23, 2026
• mailenable MailEnable < 10.54 Cleartext Credential Storage in AUTH.TAB CVE-2025-34427 8.4 HighDecember 10, 2025
• mailenable MailEnable < 10.54 Cleartext Credential Storage in AUTH.SAV CVE-2025-34428 8.4 HighDecember 10, 2025
• mailenable MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAISP.DLL CVE-2025-34421 8.5 HighDecember 10, 2025
• mailenable MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAISO.DLL CVE-2025-34417 8.5 HighDecember 10, 2025
• mailenable MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAISM.DLL CVE-2025-34419 8.5 HighDecember 10, 2025
• mailenable MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIPO.DLL CVE-2025-34416 8.5 HighDecember 10, 2025
• mailenable MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIPC.DLL CVE-2025-34422 8.5 HighDecember 10, 2025
• mailenable MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIMF.DLL CVE-2025-34418 8.5 HighDecember 10, 2025
• mailenable MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIDP.DLL CVE-2025-34424 8.5 HighDecember 10, 2025
• mailenable MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIAU.DLL CVE-2025-34423 8.5 HighDecember 10, 2025
• mailenable MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIAM.DLL CVE-2025-34420 8.5 HighDecember 10, 2025
• mailenable MailEnable < 10.54 Reflected XSS in WindowContext Parameter of MAI/compose.aspx CVE-2025-34425 5.3 MediumDecember 9, 2025
• mailenable MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAINFY.DLL CVE-2025-34396 8.5 HighDecember 9, 2025
• mailenable MailEnable < 10.54 Reflected XSS in Added Parameter of MAI/AddRecipientsResult.aspx CVE-2025-34408 5.3 MediumDecember 9, 2025
• mailenable MailEnable < 10.54 Reflected XSS in AddressesBcc Parameter of AddressBook.aspx CVE-2025-34398 5.3 MediumDecember 9, 2025
• mailenable MailEnable < 10.54 Reflected XSS in AddressesCc Parameter of AddressBook.aspx CVE-2025-34399 5.3 MediumDecember 9, 2025
• mailenable MailEnable < 10.54 Reflected XSS in AddressesTo Parameter of AddressBook.aspx CVE-2025-34400 5.3 MediumDecember 9, 2025
• mailenable MailEnable < 10.54 Reflected XSS in Failed Parameter of MAI/AddRecipientsResult.aspx CVE-2025-34409 5.3 MediumDecember 9, 2025
• mailenable MailEnable < 10.54 Reflected XSS in FieldBcc Parameter of AddressBook.aspx CVE-2025-34401 5.3 MediumDecember 9, 2025
• mailenable MailEnable < 10.54 Reflected XSS in FieldCc Parameter of AddressBook.aspx CVE-2025-34402 5.3 MediumDecember 9, 2025
• mailenable MailEnable < 10.54 Reflected XSS in FieldTo Parameter of AddressBook.aspx CVE-2025-34403 5.3 MediumDecember 9, 2025
• mailenable MailEnable < 10.54 Reflected XSS in Id Parameter of Mobile/ContactDetails.aspx CVE-2025-34406 5.3 MediumDecember 9, 2025
• mailenable MailEnable < 10.54 Reflected XSS in InstanceScope Parameter of CAL/compose.aspx CVE-2025-34404 5.3 MediumDecember 9, 2025
• mailenable MailEnable < 10.54 Reflected XSS in Message Parameter of Mobile/Compose.aspx CVE-2025-34397 5.3 MediumDecember 9, 2025
• mailenable MailEnable < 10.54 Reflected XSS in theme Parameter of Statistics.aspx CVE-2025-34407 5.3 MediumDecember 9, 2025
• mailenable Cross Site Scripting (XSS) vulnerability in MailEnable before v10 allows a remote attacker to... CVE-2025-44148 Public exploit EPSS 55.3% 9.8 CriticalJune 3, 2025
• mailenable Authenticated mail users, under specific circumstances, could add files with unsanitized content... CVE-2022-42136 8.8 HighJanuary 13, 2023
• mailenable MailEnable Enterprise Premium 10.23 was vulnerable to stored and reflected cross-site scripting ... CVE-2019-12927 6.1 MediumJuly 8, 2019
• mailenable MailEnable Enterprise Premium 10.23 did not use appropriate access control checks in a number of... CVE-2019-12926 8.8 HighJuly 8, 2019
• mailenable MailEnable Enterprise Premium 10.23 was vulnerable to multiple directory traversal issues, with... CVE-2019-12925 8.1 HighJuly 8, 2019
• mailenable MailEnable Enterprise Premium 10.23 was vulnerable to XML External Entity Injection (XXE) attacks... CVE-2019-12924 9.8 CriticalJuly 8, 2019
• mailenable In MailEnable Enterprise Premium 10.23, the potential cross-site request forgery (CSRF)... CVE-2019-12923 6.5 MediumJuly 8, 2019
• mailenable MailEnable before 8.60 allows XXE via an XML document in the request.aspx Options parameter. CVE-2015-9280 10.0 CriticalJanuary 16, 2019
• mailenable MailEnable before 8.60 allows Stored XSS via malformed use of "<img/src" with no ">" character in... CVE-2015-9279 6.1 MediumJanuary 16, 2019
• mailenable MailEnable before 8.60 allows Privilege Escalation because admin accounts could be created as a... CVE-2015-9278 9.8 CriticalJanuary 16, 2019
• mailenable MailEnable before 8.60 allows Directory Traversal for reading the messages of other users,... CVE-2015-9277 9.1 CriticalJanuary 16, 2019
• mailenable Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Enterprise 6.5 allow remote... CVE-2012-2588 Public exploit 4.3 MediumSeptember 19, 2014
• mailenable Cross-site scripting (XSS) vulnerability in ForgottenPassword.aspx in MailEnable Professional,... CVE-2012-0389 Public exploit 4.3 MediumJanuary 24, 2012
• mailenable The SMTP service (MESMTPC.exe) in MailEnable 3.x and 4.25 does not properly perform a length... CVE-2010-2580 5.0 MediumSeptember 15, 2010
• mailenable MailEnable Professional 3.5.2 and Enterprise 3.52 allow remote attackers to cause a denial of... CVE-2008-3449 5.0 MediumAugust 4, 2008
• mailenable enterprise, professional +1 more The IMAP service (MEIMAPS.exe) in MailEnable Professional Edition and Enterprise Edition 3.13 and... CVE-2008-1277 Public exploit 9.0 HighMarch 10, 2008
• mailenable enterprise, professional +1 more Multiple buffer overflows in the IMAP service (MEIMAPS.EXE) in MailEnable Professional Edition... CVE-2008-1276 Public exploit 9.0 HighMarch 10, 2008
• mailenable enterprise, professional, standard +2 more Multiple unspecified vulnerabilities in the SMTP service in MailEnable Standard Edition 1.x,... CVE-2008-1275 Public exploit 7.8 HighMarch 10, 2008
• mailenable enterprise, professional +1 more Stack-based buffer overflow in the IMAP service in MailEnable Enterprise and Professional... CVE-2007-1301 Public exploit EPSS 12.3% 9.0 HighMarch 7, 2007
• mailenable professional Cross-site request forgery (CSRF) vulnerability in MailEnable Professional before 2.37 allows... CVE-2007-0652 5.1 MediumFebruary 15, 2007
• mailenable professional Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Professional before 2.37 allow... CVE-2007-0651 4.3 MediumFebruary 15, 2007
• Show olderLoading…