Smartertools vulnerabilities

Products

• Smartermail 31
• Smarterstats 17
• Smartertrack 7

Newest

• smartertools smartermail SmarterMail < Build 9777 Stale JWT Role Claim Privilege Escalation via Refresh Token CVE-2026-104084 8.7 HighOctober 9, 2026
• smartertools smartermail SmarterMail < Build 9777 Stored Mutation XSS via MathML Foreign Content CVE-2026-104083 5.3 MediumOctober 9, 2026
• smartertools smartermail SmarterMail < Build 9777 SysAdmin Remote Code Execution via Volume Mount CVE-2026-104082 Public exploit 8.6 HighOctober 9, 2026
• smartertools smartermail SmarterTools SmarterMail < Build 9560 Server Local File Inclusion via the /api/v1/report/summary/{type} API CVE-2026-7807 8.7 HighMay 8, 2026
• smartertools smartermail SmarterTools SmarterMail < Build 9610 Cryptographic Weakness via Weak RNG CVE-2026-40514 8.2 HighApril 27, 2026
• smartertools smartermail SmarterTools SmarterMail before 9526 allows XSS via MAPI requests. CVE-2026-26930 7.2 HighFebruary 16, 2026
• smartertools smartermail SmarterTools SmarterMail < Build 9518 Unauthenticated background-of-the-day Path Coercion CVE-2026-25067 6.9 MediumJanuary 29, 2026
• smartertools smartermail SmarterTools SmarterMail < Build 9511 Unauthenticated RCE via ConnectToHub API CVE-2026-24423 In KEVPublic exploit EPSS 88.2% 9.3 CriticalJanuary 23, 2026
• smartertools smartermail SmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset API CVE-2026-23760 In KEVPublic exploit EPSS 96.4% 9.3 CriticalJanuary 22, 2026
• smartertools smartertrack SmarterTools SmarterTrack 7922 -Information Disclosure CVE-2020-36926 6.9 MediumJanuary 15, 2026
• smartertools smartermail Upload Arbitrary Files CVE-2025-52691 In KEVPublic exploit EPSS 85.7% 10.0 CriticalDecember 29, 2025
• smartertools smartermail SmarterTools SmarterMail 16.x 8495 through 8664 before 8747 allows stored XSS via a crafted... CVE-2023-48116 5.4 MediumDecember 21, 2023
• smartertools smartermail SmarterTools SmarterMail 16.x 8495 through 8664 before 8747 allows stored DOM XSS because an XSS... CVE-2023-48115 5.4 MediumDecember 21, 2023
• smartertools smartermail SmarterTools SmarterMail 16.x 8495 through 8664 before 8747 allows stored XSS by using image/svg... CVE-2023-48114 5.4 MediumDecember 21, 2023
• smartertools smartertrack File upload and overwrite to app_data/Config in SmarterTrack v100.0.8019.14010 CVE-2022-24387 9.1 CriticalMarch 14, 2022
• smartertools smartertrack Stored XSS in SmarterTrack v100.0.8019.14010 CVE-2022-24386 8.8 HighMarch 14, 2022
• smartertools smartertrack Information disclosure via direct object access on SmarterTrack v100.0.8019.14010 CVE-2022-24385 6.5 MediumMarch 14, 2022
• smartertools smartertrack Reflective XSS on SmarterTrack v100.0.8019.14010 CVE-2022-24384 8.8 HighMarch 14, 2022
• smartertools smartermail SmarterTools SmarterMail 16.x through 100.x before 100.0.7803 allows XSS. CVE-2021-43977 6.1 MediumNovember 17, 2021
• smartertools smartermail SmarterTools SmarterMail 16.x through 100.x before 100.0.7803 allows remote code execution. CVE-2021-32234 9.8 CriticalNovember 17, 2021
• smartertools smartermail SmarterTools SmarterMail 16.x before build 7866 has stored XSS. The application fails to sanitize... CVE-2021-40377 5.4 MediumSeptember 8, 2021
• smartertools smartermail An issue was discovered in SmarterTools SmarterMail through 100.0.7537. Meddler-in-the-middle... CVE-2020-29548 8.1 HighAugust 17, 2021
• smartertools smartermail SmarterTools SmarterMail before Build 7776 allows XSS. CVE-2021-32233 6.1 MediumJuly 5, 2021
• smartertools smartermail SmarterTools SmarterMail 16.x before build 6985 allows directory traversal. An authenticated user... CVE-2019-7213 Public exploit EPSS 41.5% 6.5 MediumApril 24, 2019
• smartertools smartermail SmarterTools SmarterMail 16.x before build 6985 has hardcoded secret keys. An unauthenticated... CVE-2019-7212 8.2 HighApril 24, 2019
• smartertools smartermail SmarterTools SmarterMail 16.x before build 6995 has stored XSS. JavaScript code could be executed... CVE-2019-7211 6.1 MediumApril 24, 2019
• smartertools smartermail SmarterTools SmarterMail 16.x before build 6985 allows deserialization of untrusted data. An... CVE-2019-7214 Public exploit EPSS 84.9% 9.8 CriticalApril 24, 2019
• smartertools smartermail SmarterTools SmarterMail before 13.3.5535 was vulnerable to stored XSS by bypassing the anti-XSS... CVE-2015-9276 6.1 MediumJanuary 16, 2019
• smartertools smarterstats SmarterStats Version 11.3.6347 will Render the Referer Field of HTTP Logfiles from URL /Data... CVE-2017-14620 Public exploit 6.1 MediumSeptember 29, 2017
• smartertools smartermail Multiple cross-site scripting (XSS) vulnerabilities in SmarterMail 9.2 allow remote attackers to... CVE-2012-2578 Public exploit 4.3 MediumSeptember 19, 2012
• smartertools smarterstats SmarterTools SmarterStats 6.2.4100 sends incorrect Content-Type headers for certain resources,... CVE-2011-4752 10.0 HighDecember 16, 2011
• smartertools smarterstats SmarterTools SmarterStats 6.2.4100 generates web pages containing external links in response to... CVE-2011-4751 5.0 MediumDecember 16, 2011
• smartertools smarterstats Multiple cross-site scripting (XSS) vulnerabilities in SmarterTools SmarterStats 6.2.4100 allow... CVE-2011-4750 4.3 MediumDecember 16, 2011
• smartertools smarterstats The SmarterTools SmarterStats 6.0 web server omits the Content-Type header for certain resources,... CVE-2011-2159 10.0 HighMay 20, 2011
• smartertools smarterstats The SmarterTools SmarterStats 6.0 web server sends incorrect Content-Type headers for certain... CVE-2011-2158 10.0 HighMay 20, 2011
• smartertools smarterstats The (1) Admin/frmEmailReportSettings.aspx and (2) Admin/frmGeneralSettings.aspx components in the... CVE-2011-2157 5.0 MediumMay 20, 2011
• smartertools smarterstats The SmarterTools SmarterStats 6.0 web server allows remote attackers to obtain directory listings... CVE-2011-2156 5.0 MediumMay 20, 2011
• smartertools smarterstats Login.aspx in the SmarterTools SmarterStats 6.0 web server generates a ctl00$MPH$txtPassword... CVE-2011-2155 7.5 HighMay 20, 2011
• smartertools smarterstats login.aspx in the SmarterTools SmarterStats 6.0 web server does not include the HTTPOnly flag in... CVE-2011-2154 5.0 MediumMay 20, 2011
• smartertools smarterstats Login.aspx in the SmarterTools SmarterStats 6.0 web server supports URLs containing txtUser and... CVE-2011-2153 5.0 MediumMay 20, 2011
• smartertools smarterstats The SmarterTools SmarterStats 6.0 web server generates web pages containing external links in... CVE-2011-2152 5.0 MediumMay 20, 2011
• smartertools smarterstats The (1) Admin/frmEmailReportSettings.aspx, (2) Admin/frmGeneralSettings.aspx, (3) Admin/frmSite... CVE-2011-2151 5.0 MediumMay 20, 2011
• smartertools smarterstats The SmarterTools SmarterStats 6.0 web server does not properly validate string data that is... CVE-2011-2150 5.0 MediumMay 20, 2011
• smartertools smarterstats Multiple SQL injection vulnerabilities in the SmarterTools SmarterStats 6.0 web server allow... CVE-2011-2149 7.5 HighMay 20, 2011
• smartertools smarterstats Admin/frmSite.aspx in the SmarterTools SmarterStats 6.0 web server allows remote attackers to... CVE-2011-2148 10.0 HighMay 20, 2011
• smartertools smartermail Directory traversal vulnerability in FileStorageUpload.ashx in SmarterMail 7.1.3876 allows remote... CVE-2010-3486 Public exploit 5.0 MediumSeptember 22, 2010
• smartertools smarterstats Cross-site scripting (XSS) vulnerability in UserControls/Popups/frmHelp.aspx in SmarterStats 5.3,... CVE-2010-3425 Public exploit 4.3 MediumSeptember 16, 2010
• smartertools smartertrack Cross-site scripting (XSS) vulnerability in frmTickets.aspx in SmarterTools SmarterTrack before 4... CVE-2009-4995 4.3 MediumAugust 25, 2010
• smartertools smartertrack Cross-site scripting (XSS) vulnerability in frmKBSearch.aspx in SmarterTools SmarterTrack before... CVE-2009-4994 4.3 MediumAugust 25, 2010
• smartertools smartermail Unspecified vulnerability in SmarterMail Web Server (SMWebSvr.exe) in SmarterMail 5.0.2999 allows... CVE-2008-1854 Public exploit 5.0 MediumApril 16, 2008
• Show olderLoading…