Show filters
11 Total Results
Displaying 1-10 of 11
Sort by:
Attacker Value
Unknown
CVE-2023-48974
Disclosure Date: February 08, 2024 (last updated February 28, 2024)
Cross Site Scripting vulnerability in Axigen WebMail prior to 10.3.3.61 allows a remote attacker to escalate privileges via a crafted script to the serverName_input parameter.
0
Attacker Value
Unknown
CVE-2023-23566
Disclosure Date: January 13, 2023 (last updated October 08, 2023)
A 2-Step Verification problem in Axigen 10.3.3.52 allows an attacker to access a mailbox by bypassing 2-Step Verification when they try to add an account to any third-party webmail service (or add an account to Outlook or Gmail, etc.) with IMAP or POP3 without any verification code.
0
Attacker Value
Unknown
CVE-2015-5379
Disclosure Date: October 23, 2017 (last updated November 26, 2024)
Cross-site scripting (XSS) vulnerability in actions.hsp in the Ajax WebMail interface in AXIGEN Mail Server before 9.0 allows remote attackers to inject arbitrary web script or HTML via an email attachment.
0
Attacker Value
Unknown
CVE-2012-2592
Disclosure Date: June 18, 2014 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in Axigen Mail Server 8.0.1 allows remote attackers to inject arbitrary web script or HTML via the body of an email.
0
Attacker Value
Unknown
CVE-2012-4940
Disclosure Date: October 31, 2012 (last updated October 05, 2023)
Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote attackers to read or delete arbitrary files via a .. (dot dot) in (1) the fileName parameter in a download action to source/loggin/page_log_dwn_file.hsp, or the fileName parameter in (2) an edit action or (3) a delete action to the default URI.
0
Attacker Value
Unknown
CVE-2010-3459
Disclosure Date: September 17, 2010 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in the Ajax WebMail interface in AXIGEN Mail Server before 7.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
0
Attacker Value
Unknown
CVE-2010-3460
Disclosure Date: September 17, 2010 (last updated October 04, 2023)
Directory traversal vulnerability in the HTTP interface in AXIGEN Mail Server 7.4.1 for Windows allows remote attackers to read arbitrary files via a %5C (encoded backslash) in the URL.
0
Attacker Value
Unknown
CVE-2009-1484
Disclosure Date: April 29, 2009 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in the web mail interface feature in AXIGEN Mail Server 6.2.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving e-mail messages. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
0
Attacker Value
Unknown
CVE-2008-0434
Disclosure Date: January 23, 2008 (last updated October 04, 2023)
Format string vulnerability in the AXIMilter module in AXIGEN Mail Server 5.0.2 allows remote attackers to execute arbitrary code via format string specifiers in the CNHO command.
0
Attacker Value
Unknown
CVE-2007-0886
Disclosure Date: February 12, 2007 (last updated October 04, 2023)
Heap-based buffer underflow in axigen 1.2.6 through 2.0.0b1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via certain base64-encoded data on the pop3 port (110/tcp), which triggers an integer overflow.
0
