Netwin vulnerabilities

Products

• Surgemail 18
• Surgeftp 14
• Dmail 6
• Cwmail 5
• Dmailweb 4
• Webmail 4
• Webnews 3
• Surgeldap 2

Newest

• netwin surgeftp Netwin SurgeFTP <= v23c8 Authenticated RCE CVE-2012-10028 Public exploit 8.6 HighAugust 5, 2025
• netwin surgemail Cross-Site Scripting (XSS) en SurgeMail de NetWin CVE-2024-11990 4.6 MediumNovember 29, 2024
• bird fastmail, netwin +1 more CVE-2024-7209 CVE-2024-7209 6.5 MediumJuly 30, 2024
• netwin surgeftp cgi/surgeftpmgr.cgi (aka the Web Manager interface on TCP port 7021 or 9021) in NetWin SurgeFTP... CVE-2017-17933 6.1 MediumDecember 29, 2017
• netwin surgeftp Buffer overflow in NetWin SurgeFTP before 23d2 allows remote attackers to cause a denial of... CVE-2013-4742 7.5 HighAugust 9, 2013
• netwin surgemail Cross-site scripting (XSS) vulnerability in NetWin SurgeMail 6.0a4 allows remote attackers to... CVE-2012-2575 Public exploit 4.3 MediumSeptember 17, 2012
• netwin surgemail Cross-site scripting (XSS) vulnerability in NetWin Surgemail before 4.3g allows remote attackers... CVE-2010-3201 Public exploit 4.3 MediumJanuary 7, 2011
• netwin surgeftp Multiple cross-site scripting (XSS) vulnerabilities in surgeftpmgr.cgi in NetWin SurgeFTP 2.3a6... CVE-2010-1068 4.3 MediumMarch 23, 2010
• netwin surgemail Buffer overflow in the IMAP service in NetWin Surgemail 3.9e, and possibly other versions before... CVE-2008-7182 Public exploit EPSS 24.3% 4.0 MediumSeptember 8, 2009
• netwin smsgate The SSL web administration service in NetWin SmsGate 1.1n and earlier allows remote attackers to... CVE-2008-5421 5.0 MediumDecember 11, 2008
• netwin surgemail Unspecified vulnerability in the IMAP service in NetWin SurgeMail before 3.9g2 allows remote... CVE-2008-2859 Public exploit 5.0 MediumJune 25, 2008
• netwin surgemail Stack-based buffer overflow in the IMAP service in NetWin Surgemail 3.8k4-4 and earlier allows... CVE-2008-1498 Public exploit 9.0 HighMarch 25, 2008
• netwin surgemail Stack-based buffer overflow in the IMAP service in NetWin SurgeMail 38k4-4 and earlier allows... CVE-2008-1497 9.0 HighMarch 25, 2008
• netwin surgemail, webmail +1 more Format string vulnerability in webmail.exe in NetWin SurgeMail 38k4 and earlier and beta 39a, and... CVE-2008-1055 Public exploit 7.5 HighFebruary 27, 2008
• netwin surgemail Stack-based buffer overflow in the _lib_spawn_user_getpid function in (1) swatch.exe and (2)... CVE-2008-1054 Public exploit 6.4 MediumFebruary 27, 2008
• netwin surgeftp The administration web interface in NetWin SurgeFTP 2.3a2 and earlier allows remote attackers to... CVE-2008-1052 Public exploit 6.4 MediumFebruary 27, 2008
• netwin surgemail Stack-based buffer overflow in the webmail feature in SurgeMail 38k4 allows remote attackers to... CVE-2007-6457 Public exploit 5.0 MediumDecember 20, 2007
• netwin dnewsweb Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/dnewsweb.exe in NetWin DNewsWeb ... CVE-2007-5370 Public exploit 4.3 MediumOctober 11, 2007
• netwin surgemail Stack-based buffer overflow in the IMAP service in SurgeMail 38k allows remote authenticated... CVE-2007-4377 Public exploit 6.0 MediumAugust 16, 2007
• netwin surgemail Unspecified vulnerability in NetWin SurgeMail 38k on Windows Server 2003 has unknown impact and... CVE-2007-4372 10.0 HighAugust 16, 2007
• netwin surgeftp Cross-site scripting (XSS) vulnerability in the mirrored server management interface in SurgeFTP... CVE-2007-3769 5.8 MediumJuly 15, 2007
• netwin surgeftp The mirror mechanism in SurgeFTP 2.3a1 allows user-assisted, remote FTP servers to cause a denial... CVE-2007-3768 8.5 HighJuly 15, 2007
• netwin surgemail, webmail +1 more Unspecified vulnerability in NetWin Webmail 3.1s-1 in SurgeMail before 3.8i2 has unknown impact... CVE-2007-2655 7.5 HighMay 14, 2007
• netwin webnews PHP remote file inclusion vulnerability in parse/parser.php in WEB//NEWS (aka webnews) 1.4 and... CVE-2006-5100 Public exploit 7.5 HighOctober 2, 2006
• netwin surgemail Cross-site scripting (XSS) vulnerability in NetWin SurgeMail 3.0c2 allows remote attackers to... CVE-2005-1714 4.3 MediumMay 24, 2005
• netwin dmail DList (dlist.exe) in DMail 3.1a allows remote attackers to bypass authentication, read log files,... CVE-2005-1516 7.5 HighMay 11, 2005
• netwin dmail Format string vulnerability in dSMTP (dsmtp.exe) in DMail 3.1a allows remote attackers to execute... CVE-2005-1478 7.5 HighMay 11, 2005
• netwin surgeftp SurgeFTP 2.2m1 allows remote attackers to cause a denial of service (application hang) via the... CVE-2005-1034 5.0 MediumApril 9, 2005
• netwin surgemail Multiple cross-site scripting (XSS) vulnerabilities in the email auto-reply message in SurgeMail... CVE-2005-0846 4.3 MediumMarch 24, 2005
• netwin surgemail, webmail +1 more Multiple cross-site scripting (XSS) vulnerabilities in NetWin (1) SurgeMail before 2.0c and (2)... CVE-2004-2548 Public exploit 4.3 MediumDecember 31, 2004
• netwin surgemail, webmail +1 more NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to obtain sensitive... CVE-2004-2547 Public exploit 2.6 LowDecember 31, 2004
• netwin surgemail Unspecified vulnerability in SurgeMail before 2.2c10 has unknown impact and attack vectors,... CVE-2004-2537 10.0 HighDecember 31, 2004
• netwin surgeldap SurgeLDAP 1.0g (Build 12), and possibly other versions before 1.0h, allows remote attackers to... CVE-2004-2254 Public exploit 7.5 HighDecember 31, 2004
• netwin surgeldap Directory traversal vulnerability in user.cgi in SurgeLDAP 1.0g and earlier allows remote... CVE-2004-2253 Public exploit 5.0 MediumDecember 31, 2004
• netwin webnews Buffer overflow in Netwin WebNews CGI program 1.1, Webnews.exe, allows remote attackers to... CVE-2002-0290 7.5 HighMay 31, 2002
• netwin webnews Netwin WebNews 1.1k CGI program includes several default usernames and cleartext passwords that... CVE-2002-0310 7.5 HighMay 3, 2002
• netwin cwmail Buffer overflow in CWMail.exe in NetWin before 2.8a allows remote authenticated users to execute... CVE-2002-0273 4.6 MediumMay 3, 2002
• netwin surgeftp Directory traversal vulnerability in NetWin SurgeFTP 2.0a and 1.0b allows a remote attacker to... CVE-2001-0698 5.0 MediumSeptember 20, 2001
• netwin surgeftp NetWin SurgeFTP prior to 1.1h allows a remote attacker to cause a denial of service (crash) via... CVE-2001-0697 Public exploit 5.0 MediumSeptember 20, 2001
• netwin surgeftp NetWin SurgeFTP 2.0a and 1.0b allows a remote attacker to cause a denial of service (crash) via a... CVE-2001-0696 5.0 MediumSeptember 20, 2001
• netwin surgeftp NetWin SurgeFTP 2.0f and earlier encrypts passwords using weak hashing, a fixed salt value and... CVE-2001-1356 10.0 HighAugust 4, 2001
• netwin dmail, surgeftp +1 more Buffer overflows in NetWin Authentication Module (NWAuth) 3.0b and earlier, as implemented in... CVE-2001-1355 10.0 HighJuly 20, 2001
• netwin dmail, surgeftp +1 more NetWin Authentication module (NWAuth) 2.0 and 3.0b, as implemented in SurgeFTP, DMail, and... CVE-2001-1354 Public exploit 4.6 MediumJuly 20, 2001
• netwin netauth netauth.cgi program in Netwin Netauth 4.2e and earlier allows remote attackers to read arbitrary... CVE-2000-0782 Public exploit 5.0 MediumOctober 13, 2000
• netwin cwmail, dmailweb +1 more The default configuration of NetWin dMailWeb and cwMail trusts all POP servers, which allows... CVE-2000-0611 5.0 MediumJune 23, 2000
• netwin cwmail, dmailweb +1 more NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to bypass authentication and... CVE-2000-0610 5.0 MediumJune 23, 2000
• netwin cwmail, dmailweb +1 more NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to cause a denial of service... CVE-2000-0609 5.0 MediumJune 21, 2000
• netwin cwmail, dmailweb +1 more NetWin dMailWeb and cwMail 2.6i and earlier allows remote attackers to cause a denial of service... CVE-2000-0608 5.0 MediumJune 21, 2000
• netwin dmail Buffer overflow in the NetWin DSMTP 2.7q in the NetWin dmail package allows remote attackers to... CVE-2000-0490 Public exploit 10.0 HighJune 1, 2000
• netwin dnews Buffer overflow in Netwin DNEWSWEB CGI program allows remote attackers to execute arbitrary... CVE-2000-0423 Public exploit 5.0 MediumMay 5, 2000
• Show olderLoading…