Vulnerabilities > Emclient > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-08-20 CVE-2020-12618 Unspecified vulnerability in Emclient EM Client
eM Client before 7.2.33412.0 automatically imported S/MIME certificates and thereby silently replaced existing ones.
network
high complexity
emclient
4.8
4.8
2018-05-16 CVE-2017-17689 The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL. 5.9
5.9
2018-05-16 CVE-2017-17688 The OpenPGP specification allows a Cipher Feedback Mode (CFB) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL. 5.9
5.9