Browse CVEs

HIGH 7.5 CVE-2011-2149 Multiple SQL injection vulnerabilities in the SmarterTools SmarterStats 6.0 web server allow remote attackers to execute arbitrary SQL commands via c… Smarterstats Mitigation only Fix from $1,9502011-05-20 HIGH 7.5 CVE-2011-2155 Login.aspx in the SmarterTools SmarterStats 6.0 web server generates a ctl00$MPH$txtPassword password form field without disabling the autocomplete f… Smarterstats Mitigation only Fix from $1,9502011-05-20 MEDIUM 5.0 CVE-2011-2150 The SmarterTools SmarterStats 6.0 web server does not properly validate string data that is intended for storage in an XML document, which allows rem… Smarterstats Mitigation only Fix from $1,6002011-05-20 MEDIUM 5.0 CVE-2011-2151 The (1) Admin/frmEmailReportSettings.aspx, (2) Admin/frmGeneralSettings.aspx, (3) Admin/frmSite.aspx, (4) Client/frmUser.aspx, and (5) Login.aspx com… Smarterstats Mitigation only Fix from $1,6002011-05-20 MEDIUM 5.0 CVE-2011-2152 The SmarterTools SmarterStats 6.0 web server generates web pages containing external links in response to GET requests with query strings for (1) Cli… Smarterstats Mitigation only Fix from $1,6002011-05-20 MEDIUM 5.0 CVE-2011-2153 Login.aspx in the SmarterTools SmarterStats 6.0 web server supports URLs containing txtUser and txtPass parameters in the query string, which makes i… Smarterstats Mitigation only Fix from $1,6002011-05-20 MEDIUM 5.0 CVE-2011-2154 login.aspx in the SmarterTools SmarterStats 6.0 web server does not include the HTTPOnly flag in a Set-Cookie header for the loginsettings cookie, wh… Smarterstats Mitigation only Fix from $1,6002011-05-20 MEDIUM 5.0 CVE-2011-2156 The SmarterTools SmarterStats 6.0 web server allows remote attackers to obtain directory listings via a direct request for the (1) Admin/, (2) Admin/… Smarterstats Mitigation only Fix from $1,6002011-05-20 MEDIUM 5.0 CVE-2011-2157 The (1) Admin/frmEmailReportSettings.aspx and (2) Admin/frmGeneralSettings.aspx components in the SmarterTools SmarterStats 6.0 web server generate w… Smarterstats Mitigation only Fix from $1,6002011-05-20 MEDIUM 5.0 CVE-2010-3486 Directory traversal vulnerability in FileStorageUpload.ashx in SmarterMail 7.1.3876 allows remote attackers to read arbitrary files via a (1) ../ (do… Smartermail No fix yet Fix from $1,6002010-09-22 MEDIUM 5.0 CVE-2008-1854 Unspecified vulnerability in SmarterMail Web Server (SMWebSvr.exe) in SmarterMail 5.0.2999 allows remote attackers to cause a denial of service (serv… Smartermail No fix yet Fix from $1,6002008-04-16 HIGH 7.8 CVE-2004-2583 SMTP service in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to cause a denial of service (CPU consumption) via a large num… Smartermail Mitigation only Fix from $1,9502004-12-31 MEDIUM 5.0 CVE-2004-2586 Directory traversal vulnerability in frmGetAttachment.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to read arbitrar… Smartermail No fix yet Fix from $1,6002004-12-31 MEDIUM 5.0 CVE-2004-2587 login.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to cause a denial of service via a long txtusername parameter, p… Smartermail No fix yet Fix from $1,6002004-12-31