Approved changes feed: RSS · Atom

cpe:2.3:a:mailenable:mailenable_professional:1.5:*:*:*:*:*:*:*

part: a version: 1.5 update: *

VendorMailenable (ac781917-bc09-5845-a37c-c45d67bfa524)
ProductMailenable Professional (bdb29d49-6385-5ec9-ae52-712a313e23f1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-0652 vulnerable 2026-06-08 04:49:32.986587 Details available
Cross-site request forgery (CSRF) vulnerability in MailEnable Professional before 2.37 allows remote attackers to modify arbitrary configurations and perform unauthorized actions as arbitrary users via a link or IMG tag.
Published: 2007-02-15T23:00:00.000Z
Updated: 2024-08-07T12:26:54.322Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-0651 vulnerable 2026-06-08 04:49:32.968580 Details available
Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Professional before 2.37 allow remote attackers to inject arbitrary Javascript script via (1) e-mail messages and (2) the ID parameter to (a) right.asp, (b) Forms/MAI/list.asp, and (c) Forms/VCF/list.asp in mewebmail/base/default/lang/EN/.
Published: 2007-02-15T23:00:00.000Z
Updated: 2024-08-07T12:26:54.317Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3277 vulnerable 2026-06-08 04:49:08.804919 Details available
The SMTP service of MailEnable Standard 1.92 and earlier, Professional 2.0 and earlier, and Enterprise 2.0 and earlier before the MESMTPC hotfix, allows remote attackers to cause a denial of service (application crash) via a HELO command with a null byte in the argument, possibly triggering a length inconsistency or a missing argument.
Published: 2006-06-28T22:00:00.000Z
Updated: 2024-08-07T18:23:20.680Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1792 vulnerable 2026-06-08 04:48:58.039347 Details available
Unspecified vulnerability in the POP service in MailEnable Standard Edition before 1.94, Professional Edition before 1.74, and Enterprise Edition before 1.22 has unknown attack vectors and impact related to "authentication exploits". NOTE: this is a different set of affected versions, and probably a different vulnerability than CVE-2006-1337.
Published: 2006-04-15T10:00:00.000Z
Updated: 2024-09-17T00:56:41.477Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1338 vulnerable 2026-06-08 04:48:56.970580 Details available
Webmail in MailEnable Professional Edition before 1.73 and Enterprise Edition before 1.21 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors involving "incorrectly encoded quoted-printable emails".
Published: 2006-03-21T02:00:00.000Z
Updated: 2024-08-07T17:12:20.561Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0503 vulnerable 2026-06-08 04:48:54.180903 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2223 vulnerable 2026-06-08 04:48:28.661187 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2222 vulnerable 2026-06-08 04:48:28.658883 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1781 vulnerable 2026-06-08 04:48:27.500717 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1014 vulnerable 2026-06-08 04:48:24.886560 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1013 vulnerable 2026-06-08 04:48:24.882942 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2194 vulnerable 2026-06-08 04:48:08.817851 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.