Browse CVEs

CRITICAL 9.8 CVE-2024-24133 Atmail v6.6.0 was discovered to contain a SQL injection vulnerability via the username parameter on the login page. Atmail Mitigation only Fix from $2,3002024-02-07 MEDIUM 6.1 CVE-2022-31200 Atmail 5.62 allows XSS via the mail/parse.php?file=html/$this-%3ELanguage/help/filexp.html&FirstLoad=1&HelpFile=file.html Search Terms field. Atmail Mitigation only Fix from $1,6002023-07-27 MEDIUM 6.1 CVE-2022-30776 atmail 6.5.0 allows XSS via the index.php/admin/index/ error parameter. Atmail Mitigation only Fix from $1,6002022-05-16 MEDIUM 6.1 CVE-2021-43574 WebAdmin Control Panel in Atmail 6.5.0 (a version released in 2012) allows XSS via the format parameter to the default URI. NOTE: This vulnerability … Atmail Mitigation only Fix from $1,6002021-11-15 MEDIUM 6.1 CVE-2012-2593EPSS 6% Cross-site scripting (XSS) vulnerability in the administrative interface in Atmail Webmail Server 6.4 allows remote attackers to inject arbitrary web… Atmail No fix yet Fix from $1,6002020-02-06 MEDIUM 6.1 CVE-2017-11617 Cross-site scripting (XSS) vulnerability in atmail prior to version 7.8.0.2 allows remote attackers to inject arbitrary web script or HTML within the… Atmail after 7.8.0.1 Fix from $1,6002017-07-25 HIGH 8.8 CVE-2017-9517 atmail before 7.8.0.2 has CSRF, allowing an attacker to upload and import users via CSV. Atmail after 7.8.0.1 Fix from $1,9502017-06-08 HIGH 8.8 CVE-2017-9518 atmail before 7.8.0.2 has CSRF, allowing an attacker to change the SMTP hostname and hijack all emails. Atmail after 7.8.0.1 Fix from $1,9502017-06-08 HIGH 8.8 CVE-2017-9519 atmail before 7.8.0.2 has CSRF, allowing an attacker to create a user account. Atmail after 7.8.0.1 Fix from $1,9502017-06-08 HIGH 10.0 CVE-2013-5031 Unspecified vulnerability in Atmail before 6.6.4, and 7.x before 7.1.2, has unknown impact and attack vectors, a different vulnerability than CVE-201… Atmail after 6.6.3 Fix from $1,9502014-01-12 HIGH 10.0 CVE-2013-5032 Unspecified vulnerability in Atmail before 6.6.4, and 7.x before 7.1.2, has unknown impact and attack vectors, a different vulnerability than CVE-201… Atmail after 6.6.3 Fix from $1,9502014-01-12 HIGH 10.0 CVE-2013-5033 Unspecified vulnerability in Atmail before 6.6.4, and 7.x before 7.1.2, has unknown impact and attack vectors, a different vulnerability than CVE-201… Atmail after 6.6.3 Fix from $1,9502014-01-12 HIGH 10.0 CVE-2013-5034 Unspecified vulnerability in Atmail before 6.6.4, and 7.x before 7.1.2, has unknown impact and attack vectors, a different vulnerability than CVE-201… Atmail after 6.6.3 Fix from $1,9502014-01-12 MEDIUM 6.8 CVE-2013-6028 Multiple cross-site request forgery (CSRF) vulnerabilities in Atmail Webmail Server before 7.2 allow remote attackers to hijack the authentication of… Atmail after 7.1.6 Fix from $1,6002014-01-12 HIGH 7.5 CVE-2012-1916 @Mail WebMail Client in AtMail Open-Source before 1.05 allows remote attackers to execute arbitrary code via an e-mail attachment with an executable … Atmail Open after 1.04 Fix from $1,9502012-03-27 MEDIUM 6.4 CVE-2012-1919 CRLF injection vulnerability in mime.php in @Mail WebMail Client in AtMail Open-Source before 1.05 allows remote attackers to conduct directory trave… Atmail Open after 1.04 Fix from $1,6002012-03-27 MEDIUM 5.0 CVE-2012-1917 compose.php in @Mail WebMail Client in AtMail Open-Source before 1.05 does not properly handle ../ (dot dot slash) sequences in the unique parameter,… Atmail Open after 1.04 Fix from $1,6002012-03-27 MEDIUM 5.0 CVE-2012-1918 Multiple directory traversal vulnerabilities in (1) compose.php and (2) libs/Atmail/SendMsg.php in @Mail WebMail Client in AtMail Open-Source before … Atmail Open after 1.04 Fix from $1,6002012-03-27 MEDIUM 5.0 CVE-2012-1920 @Mail WebMail Client in AtMail Open-Source 1.04 and earlier allows remote attackers to obtain configuration information via a direct request to insta… Atmail Open after 1.04 Fix from $1,6002012-03-27 MEDIUM 6.8 CVE-2007-2153 Cross-site scripting (XSS) vulnerability in atmail.php in @Mail 5.0 allows remote attackers to inject arbitrary web script or HTML via the username p… Atmail Webmail after 5.0 Fix from $1,6002007-04-19 HIGH 7.5 CVE-2006-6701 Cross-site request forgery (CSRF) vulnerability in util.pl in @Mail WebMail 4.51, and util.php in 5.x before 5.03, allows remote attackers to modify … Atmail Webmail Mitigation only Fix from $1,9502006-12-23 MEDIUM 6.8 CVE-2006-6702 Cross-site scripting (XSS) vulnerability in Global.pm in @Mail before 4.61 allows remote attackers to inject arbitrary web script or HTML via crafted… Atmail Webmail after 4.6 Fix from $1,6002006-12-23 MEDIUM 6.8 CVE-2006-6704 Cross-site scripting (XSS) vulnerability in the Webadmin in @Mail before 4.6 allows remote attackers to inject arbitrary web script or HTML via unspe… Atmail Webadmin after 4.51 Fix from $1,6002006-12-23 HIGH 7.5 CVE-2006-0611 Directory traversal vulnerability in compose.pl in @Mail 4.3 and earlier for Windows allows remote attackers to upload arbitrary files to arbitrary l… Atmail Patch available Fix from $1,9502006-02-09