A.K.I Software vulnerabilities

Products

• pmc.exe 2
• pmam.exe 1
• pmman.exe (Enterprise edition) 1
• pmman.exe (Pro + IMAP4 edition) 1
• pmman.exe (Pro edition) 1
• pmman.exe (Standard + IMAP4 edition) 1
• pmman.exe (Standard edition) 1
• pmmls.exe 1
• pmum.exe (Pro + IMAP4 edition / Enterprise edition) 1
• pmum.exe (Pro edition) 1
• pmum.exe (Standard + IMAP4 edition) 1
• pmum.exe (Standard edition) 1

Latest A.K.I Software CVEs

Newest publication first

1. CVE-2023-40747 Directory traversal vulnerability exists in A.K.I Software's PMailServer/PMailServer2 products' CGIs included in Internal Simple Webserver. If this vulnerability is exploited, a remote attacker may ac...

   Published 2024-03-18

   High·CVSS 7.5 EPSS 1.3%

   Directory traversal vulnerability exists in A.K.I Software's PMailServer/PMailServer2 products' CGIs included in Internal Simple Webserver. If this vulnerability is exploited, a remote attacker may access arbitrary files outside DocumentRoot.

2. CVE-2023-40160 Directory traversal vulnerability exists in Mailing List Search CGI (pmmls.exe) included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerability is exploited, a remote attacker ma...

   Published 2024-03-18

   Low·CVSS 3.7 EPSS 0.99%

   Directory traversal vulnerability exists in Mailing List Search CGI (pmmls.exe) included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerability is exploited, a remote attacker may obtain arbitrary files on the server.

3. CVE-2023-39933 Insufficient verification vulnerability exists in Broadcast Mail CGI (pmc.exe) included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerability is exploited, a user who can upload...

   Published 2024-03-18

   Medium·CVSS 4.3 EPSS 0.45%

   Insufficient verification vulnerability exists in Broadcast Mail CGI (pmc.exe) included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerability is exploited, a user who can upload files through the product may execute an arbitrary executable file with the web...

4. CVE-2023-39223 Stored cross-site scripting vulnerability exists in CGIs included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerability is exploited, an arbitrary script may be executed on a lo...

   Published 2024-03-18

   Medium·CVSS 5.4 EPSS 0.34%

   Stored cross-site scripting vulnerability exists in CGIs included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.