Approved changes feed: RSS · Atom

cpe:2.3:a:mailenable:mailenable_professional:1.84:*:*:*:*:*:*:*

part: a version: 1.84 update: *

VendorMailenable (ac781917-bc09-5845-a37c-c45d67bfa524)
ProductMailenable Professional (bdb29d49-6385-5ec9-ae52-712a313e23f1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-0652 vulnerable 2026-06-08 04:49:32.987015 Details available
Cross-site request forgery (CSRF) vulnerability in MailEnable Professional before 2.37 allows remote attackers to modify arbitrary configurations and perform unauthorized actions as arbitrary users via a link or IMG tag.
Published: 2007-02-15T23:00:00.000Z
Updated: 2024-08-07T12:26:54.322Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-0651 vulnerable 2026-06-08 04:49:32.975258 Details available
Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Professional before 2.37 allow remote attackers to inject arbitrary Javascript script via (1) e-mail messages and (2) the ID parameter to (a) right.asp, (b) Forms/MAI/list.asp, and (c) Forms/VCF/list.asp in mewebmail/base/default/lang/EN/.
Published: 2007-02-15T23:00:00.000Z
Updated: 2024-08-07T12:26:54.317Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-6605 vulnerable 2026-06-08 04:49:29.296412 Details available
Stack-based buffer overflow in the POP service in MailEnable Standard 1.98 and earlier; Professional 1.84, and 2.35 and earlier; and Enterprise 1.41, and 2.35 and earlier before ME-10026 allows remote attackers to execute arbitrary code via a long argument to the PASS command.
Published: 2006-12-19T19:00:00.000Z
Updated: 2024-08-07T20:33:59.771Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-6423 vulnerable 2026-06-08 04:49:28.836680 Details available
Stack-based buffer overflow in the IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.35, Professional Edition 1.6 through 1.84, and Enterprise Edition 1.1 through 1.41 allows remote attackers to execute arbitrary code via a pre-authentication command followed by a crafted parameter and a long string, as addressed by the ME-10025 hotfix.
Published: 2006-12-12T02:00:00.000Z
Updated: 2024-08-07T20:26:46.508Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.