CVE-2007-0651 Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Professional before 2.37 allow remote attackers to inject arbitrary Javascript script via (1) e-mail messages and (2) the ID parameter...
MediumCVSS 4.3
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Professional before 2.37 allow remote attackers to inject arbitrary Javascript script via (1) e-mail messages and (2) the ID parameter to (a) right.asp, (b) Forms/MAI/list.asp, and (c) Forms/VCF/list.asp in mewebmail/base/default/lang/EN/.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mailenable professional | = 1.0.004 | No fix listed |
| mailenable professional | = 1.0.005 | No fix listed |
| mailenable professional | = 1.0.006 | No fix listed |
| mailenable professional | = 1.0.007 | No fix listed |
| mailenable professional | = 1.0.008 | No fix listed |
| mailenable professional | = 1.0.009 | No fix listed |
| mailenable professional | = 1.0.010 | No fix listed |
| mailenable professional | = 1.0.011 | No fix listed |
| mailenable professional | = 1.0.012 | No fix listed |
| mailenable professional | = 1.0.013 | No fix listed |
| mailenable professional | = 1.0.014 | No fix listed |
| mailenable professional | = 1.0.015 | No fix listed |
| mailenable professional | = 1.0.016 | No fix listed |
| mailenable professional | = 1.0.017 | No fix listed |
| mailenable professional | = 1.1 | No fix listed |
| mailenable professional | = 1.2 | No fix listed |
| mailenable professional | = 1.2a | No fix listed |
| mailenable professional | = 1.5 | No fix listed |
| mailenable professional | = 1.6 | No fix listed |
| mailenable professional | = 1.7 | No fix listed |
| mailenable professional | = 1.12 | No fix listed |
| mailenable professional | = 1.13 | No fix listed |
| mailenable professional | = 1.14 | No fix listed |
| mailenable professional | = 1.15 | No fix listed |
| mailenable professional | = 1.16 | No fix listed |
Show 36 more
| Product | Affected versions | Fixed in |
|---|---|---|
| mailenable professional | = 1.17 | No fix listed |
| mailenable professional | = 1.18 | No fix listed |
| mailenable professional | = 1.19 | No fix listed |
| mailenable professional | = 1.51 | No fix listed |
| mailenable professional | = 1.52 | No fix listed |
| mailenable professional | = 1.53 | No fix listed |
| mailenable professional | = 1.54 | No fix listed |
| mailenable professional | = 1.72 | No fix listed |
| mailenable professional | = 1.73 | No fix listed |
| mailenable professional | = 1.82 | No fix listed |
| mailenable professional | = 1.83 | No fix listed |
| mailenable professional | = 1.84 | No fix listed |
| mailenable professional | = 1.101 | No fix listed |
| mailenable professional | = 1.102 | No fix listed |
| mailenable professional | = 1.103 | No fix listed |
| mailenable professional | = 1.104 | No fix listed |
| mailenable professional | = 1.105 | No fix listed |
| mailenable professional | = 1.106 | No fix listed |
| mailenable professional | = 1.107 | No fix listed |
| mailenable professional | = 1.108 | No fix listed |
| mailenable professional | = 1.109 | No fix listed |
| mailenable professional | = 1.110 | No fix listed |
| mailenable professional | = 1.111 | No fix listed |
| mailenable professional | = 1.112 | No fix listed |
| mailenable professional | = 1.113 | No fix listed |
| mailenable professional | = 1.114 | No fix listed |
| mailenable professional | = 1.115 | No fix listed |
| mailenable professional | = 1.116 | No fix listed |
| mailenable professional | = 2.0 | No fix listed |
| mailenable professional | = 2.1 | No fix listed |
| mailenable professional | = 2.2 | No fix listed |
| mailenable professional | = 2.32 | No fix listed |
| mailenable professional | = 2.33 | No fix listed |
| mailenable professional | = 2.34 | No fix listed |
| mailenable professional | = 2.35 | No fix listed |
| mailenable professional | = 2.351 | No fix listed |
References
- 33188 vdb-entry
- 33189 vdb-entry
- 33190 vdb-entry
- 23998 patch third-party-advisory vendor-advisory
- secunia.com patch vendor-advisory
- 2258 third-party-advisory
- www.mailenable.com
- 20070214 Secunia Research: MailEnable Web Mail Client MultipleVulnerabilities mailing-list
- 22554 vdb-entry
- ADV-2007-0595 vdb-entry
- mailenable-email-messages-xss(32476) vdb-entry
- mailenable-id-xss(32480) vdb-entry