Mailenable Professional

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:mailenable:mailenable_professional:1.6:*:*:*:*:*:*:*

part: a version: 1.6 update: *

VendorMailenable (ac781917-bc09-5845-a37c-c45d67bfa524)
ProductMailenable Professional (bdb29d49-6385-5ec9-ae52-712a313e23f1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-0652 vulnerable 2026-06-08 04:49:32.986605 Details available
Cross-site request forgery (CSRF) vulnerability in MailEnable Professional before 2.37 allows remote attackers to modify arbitrary configurations and perform unauthorized actions as arbitrary users via a link or IMG tag.
Published: 2007-02-15T23:00:00.000Z
Updated: 2024-08-07T12:26:54.322Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-0651 vulnerable 2026-06-08 04:49:32.968622 Details available
Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Professional before 2.37 allow remote attackers to inject arbitrary Javascript script via (1) e-mail messages and (2) the ID parameter to (a) right.asp, (b) Forms/MAI/list.asp, and (c) Forms/VCF/list.asp in mewebmail/base/default/lang/EN/.
Published: 2007-02-15T23:00:00.000Z
Updated: 2024-08-07T12:26:54.317Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-6484 vulnerable 2026-06-08 04:49:28.948519 Details available
The IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.34, Professional Edition 1.6 through 1.83, and Enterprise Edition 1.1 through 1.40 allows remote attackers to cause a denial of service (crash) via unspecified vectors that trigger a null pointer dereference, as addressed by the ME-10023 hotfix, and a different issue than CVE-2006-6423. NOTE: some details were obtained from third party information.
Published: 2006-12-12T20:00:00.000Z
Updated: 2024-08-07T20:26:46.583Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-6290 vulnerable 2026-06-08 04:49:28.581604 Details available
Multiple stack-based buffer overflows in the IMAP module (MEIMAPS.EXE) in MailEnable Professional 1.6 through 1.82 and 2.0 through 2.33, and MailEnable Enterprise 1.1 through 1.30 and 2.0 through 2.33 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a long argument to the (1) EXAMINE or (2) SELECT command.
Published: 2006-12-05T11:00:00.000Z
Updated: 2024-08-07T20:19:35.175Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3277 vulnerable 2026-06-08 04:49:08.805426 Details available
The SMTP service of MailEnable Standard 1.92 and earlier, Professional 2.0 and earlier, and Enterprise 2.0 and earlier before the MESMTPC hotfix, allows remote attackers to cause a denial of service (application crash) via a HELO command with a null byte in the argument, possibly triggering a length inconsistency or a missing argument.
Published: 2006-06-28T22:00:00.000Z
Updated: 2024-08-07T18:23:20.680Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1792 vulnerable 2026-06-08 04:48:58.039367 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1338 vulnerable 2026-06-08 04:48:56.970599 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0503 vulnerable 2026-06-08 04:48:54.181444 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3155 vulnerable 2026-06-08 04:48:39.737932 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.