Browse CVEs

MEDIUM 5.3 CVE-2020-36926 SmarterTrack 7922 contains an information disclosure vulnerability in the Chat Management search form that reveals agent identification details. Atta… Smartertrack No fix yet Fix from $1,6002026-01-16 MEDIUM 6.1 CVE-2017-14620 SmarterStats Version 11.3.6347 will Render the Referer Field of HTTP Logfiles from URL /Data/Reports/ReferringURLsWithQueries resulting in Stored Cro… Smarterstats No fix yet Fix from $1,6002017-09-30 HIGH 10.0 CVE-2011-4752 SmarterTools SmarterStats 6.2.4100 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecif… Smarterstats Mitigation only Fix from $1,9502011-12-16 MEDIUM 5.0 CVE-2011-4751 SmarterTools SmarterStats 6.2.4100 generates web pages containing external links in response to GET requests with query strings for frmGettingStarted… Smarterstats Mitigation only Fix from $1,6002011-12-16 HIGH 10.0 CVE-2011-2148EPSS 5% Admin/frmSite.aspx in the SmarterTools SmarterStats 6.0 web server allows remote attackers to execute arbitrary commands via vectors involving a lead… Smarterstats Mitigation only Fix from $1,9502011-05-20 HIGH 10.0 CVE-2011-2158 The SmarterTools SmarterStats 6.0 web server sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have a… Smarterstats Mitigation only Fix from $1,9502011-05-20 HIGH 10.0 CVE-2011-2159 The SmarterTools SmarterStats 6.0 web server omits the Content-Type header for certain resources, which might allow remote attackers to have an unspe… Smarterstats Mitigation only Fix from $1,9502011-05-20 HIGH 7.5 CVE-2011-2149 Multiple SQL injection vulnerabilities in the SmarterTools SmarterStats 6.0 web server allow remote attackers to execute arbitrary SQL commands via c… Smarterstats Mitigation only Fix from $1,9502011-05-20 HIGH 7.5 CVE-2011-2155 Login.aspx in the SmarterTools SmarterStats 6.0 web server generates a ctl00$MPH$txtPassword password form field without disabling the autocomplete f… Smarterstats Mitigation only Fix from $1,9502011-05-20 MEDIUM 5.0 CVE-2011-2150 The SmarterTools SmarterStats 6.0 web server does not properly validate string data that is intended for storage in an XML document, which allows rem… Smarterstats Mitigation only Fix from $1,6002011-05-20 MEDIUM 5.0 CVE-2011-2151 The (1) Admin/frmEmailReportSettings.aspx, (2) Admin/frmGeneralSettings.aspx, (3) Admin/frmSite.aspx, (4) Client/frmUser.aspx, and (5) Login.aspx com… Smarterstats Mitigation only Fix from $1,6002011-05-20 MEDIUM 5.0 CVE-2011-2152 The SmarterTools SmarterStats 6.0 web server generates web pages containing external links in response to GET requests with query strings for (1) Cli… Smarterstats Mitigation only Fix from $1,6002011-05-20 MEDIUM 5.0 CVE-2011-2153 Login.aspx in the SmarterTools SmarterStats 6.0 web server supports URLs containing txtUser and txtPass parameters in the query string, which makes i… Smarterstats Mitigation only Fix from $1,6002011-05-20 MEDIUM 5.0 CVE-2011-2154 login.aspx in the SmarterTools SmarterStats 6.0 web server does not include the HTTPOnly flag in a Set-Cookie header for the loginsettings cookie, wh… Smarterstats Mitigation only Fix from $1,6002011-05-20 MEDIUM 5.0 CVE-2011-2156 The SmarterTools SmarterStats 6.0 web server allows remote attackers to obtain directory listings via a direct request for the (1) Admin/, (2) Admin/… Smarterstats Mitigation only Fix from $1,6002011-05-20 MEDIUM 5.0 CVE-2011-2157 The (1) Admin/frmEmailReportSettings.aspx and (2) Admin/frmGeneralSettings.aspx components in the SmarterTools SmarterStats 6.0 web server generate w… Smarterstats Mitigation only Fix from $1,6002011-05-20 MEDIUM 5.0 CVE-2010-3486 Directory traversal vulnerability in FileStorageUpload.ashx in SmarterMail 7.1.3876 allows remote attackers to read arbitrary files via a (1) ../ (do… Smartermail No fix yet Fix from $1,6002010-09-22 MEDIUM 5.0 CVE-2008-1854 Unspecified vulnerability in SmarterMail Web Server (SMWebSvr.exe) in SmarterMail 5.0.2999 allows remote attackers to cause a denial of service (serv… Smartermail No fix yet Fix from $1,6002008-04-16 HIGH 7.8 CVE-2004-2583 SMTP service in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to cause a denial of service (CPU consumption) via a large num… Smartermail Mitigation only Fix from $1,9502004-12-31 MEDIUM 5.0 CVE-2004-2586 Directory traversal vulnerability in frmGetAttachment.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to read arbitrar… Smartermail No fix yet Fix from $1,6002004-12-31 MEDIUM 5.0 CVE-2004-2587 login.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to cause a denial of service via a long txtusername parameter, p… Smartermail No fix yet Fix from $1,6002004-12-31