Vulnerabilities > Gecad > Axigen Mail Server > 7.4

DATE CVE VULNERABILITY TITLE RISK
2010-09-17 CVE-2010-3460 Path Traversal vulnerability in Gecad Axigen Mail Server
Directory traversal vulnerability in the HTTP interface in AXIGEN Mail Server 7.4.1 for Windows allows remote attackers to read arbitrary files via a %5C (encoded backslash) in the URL.
network
low complexity
gecad microsoft CWE-22
5.0
2010-09-17 CVE-2010-3459 Cross-Site Scripting vulnerability in Gecad Axigen Mail Server
Cross-site scripting (XSS) vulnerability in the Ajax WebMail interface in AXIGEN Mail Server before 7.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
network
gecad CWE-79
4.3