Approved changes feed: RSS · Atom

cpe:2.3:a:netwin:surgemail:3.7b8:*:*:*:*:*:*:*

part: a version: 3.7b8 update: *

VendorNetwin (84440f9c-0c8f-54f6-a00b-4d1ca5722029)
ProductSurgemail (e002b59c-cf4b-5828-aa83-0fdab9b59443)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-3201 vulnerable 2026-06-08 04:55:13.685665 Details available
Cross-site scripting (XSS) vulnerability in NetWin Surgemail before 4.3g allows remote attackers to inject arbitrary web script or HTML via the username_ex parameter to the surgeweb program.
Published: 2011-01-07T22:00:00.000Z
Updated: 2024-08-07T03:03:18.689Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1497 vulnerable 2026-06-08 04:50:20.799508 Details available
Stack-based buffer overflow in the IMAP service in NetWin SurgeMail 38k4-4 and earlier allows remote authenticated users to execute arbitrary code via long arguments to the LSUB command.
Published: 2008-03-25T19:00:00.000Z
Updated: 2024-08-07T08:24:42.301Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.