Vulnerabilities > Mailenable > Mailenable Enterprise > 1.1

DATE CVE VULNERABILITY TITLE RISK
2007-02-12 CVE-2006-6997 Improper Authentication vulnerability in Mailenable Enterprise and Mailenable Standard
Unspecified vulnerability in a cryptographic feature in MailEnable Standard Edition before 1.93, Professional Edition before 1.73, and Enterprise Edition before 1.21 leads to "weakened authentication security" with unknown impact and attack vectors.
network
low complexity
mailenable CWE-287
critical
10.0
2006-12-12 CVE-2006-6484 Remote Denial of Service vulnerability in MailEnable IMAP Service
The IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.34, Professional Edition 1.6 through 1.83, and Enterprise Edition 1.1 through 1.40 allows remote attackers to cause a denial of service (crash) via unspecified vectors that trigger a null pointer dereference, as addressed by the ME-10023 hotfix, and a different issue than CVE-2006-6423.
network
low complexity
mailenable
5.0
2006-12-12 CVE-2006-6423 Remote Buffer Overflow vulnerability in MailEnable IMAP Service Login
Stack-based buffer overflow in the IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.35, Professional Edition 1.6 through 1.84, and Enterprise Edition 1.1 through 1.41 allows remote attackers to execute arbitrary code via a pre-authentication command followed by a crafted parameter and a long string, as addressed by the ME-10025 hotfix.
network
low complexity
mailenable
critical
10.0
2006-12-05 CVE-2006-6290 Buffer Overflow vulnerability in MailEnable IMAP Service
Multiple stack-based buffer overflows in the IMAP module (MEIMAPS.EXE) in MailEnable Professional 1.6 through 1.82 and 2.0 through 2.33, and MailEnable Enterprise 1.1 through 1.30 and 2.0 through 2.33 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a long argument to the (1) EXAMINE or (2) SELECT command.
network
low complexity
mailenable
6.5
2006-04-15 CVE-2006-1792 Remote Security vulnerability in Mailenable products
Unspecified vulnerability in the POP service in MailEnable Standard Edition before 1.94, Professional Edition before 1.74, and Enterprise Edition before 1.22 has unknown attack vectors and impact related to "authentication exploits".
network
low complexity
mailenable
critical
10.0
2006-03-21 CVE-2006-1338 Resource Management Errors vulnerability in Mailenable Enterprise and Mailenable Professional
Webmail in MailEnable Professional Edition before 1.73 and Enterprise Edition before 1.21 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors involving "incorrectly encoded quoted-printable emails".
network
low complexity
mailenable CWE-399
5.0
2006-02-01 CVE-2006-0504 Unspecified vulnerability in Mailenable Enterprise
Unspecified vulnerability in MailEnable Enterprise Edition before 1.2 allows remote attackers to cause a denial of service (CPU utilization) by viewing "formatted quoted-printable emails" via webmail.
network
low complexity
mailenable
5.0
2005-12-21 CVE-2005-4457 Denial-Of-Service vulnerability in Mailenable Enterprise 1.1
MailEnable Enterprise 1.1 before patch ME-10009 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via several "..." (triple dot) sequences in a UID FETCH command.
network
low complexity
mailenable
7.5
2005-12-21 CVE-2005-4456 IMAP Remote Buffer Overflow vulnerability in MailEnable
Multiple buffer overflows in MailEnable Professional 1.71 and Enterprise 1.1 before patch ME-10009 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long (1) LIST, (2) LSUB, and (3) UID FETCH commands.
network
low complexity
mailenable
7.8
2005-12-05 CVE-2005-3993 Denial-Of-Service vulnerability in MailEnable Enterprise
Multiple unspecified vulnerabilities in MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allow attackers to cause a denial of service (crash) via invalid IMAP commands.
network
low complexity
mailenable
7.8