Vulnerabilities > NEO > Debun POP > Medium

DATE CVE VULNERABILITY TITLE RISK
2018-11-15 CVE-2018-0687 Cross-site Scripting vulnerability in NEO Debun Imap and Debun POP
Cross-site scripting vulnerability in Denbun by NEOJAPAN Inc.
network
neo CWE-79
4.3
4.3
2018-11-15 CVE-2018-0686 Unrestricted Upload of File with Dangerous Type vulnerability in NEO Debun Imap and Debun POP
Denbun by NEOJAPAN Inc.
network
low complexity
neo CWE-434
6.5
6.5
2018-11-15 CVE-2018-0685 SQL Injection vulnerability in NEO Debun POP
SQL injection vulnerability in the Denbun POP version V3.3P R4.0 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via HTTP requests for mail search.
network
low complexity
neo CWE-89
6.5
6.5