Vulnerabilities > Netwin > Surgemail > 3.8s
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2011-01-07 | CVE-2010-3201 | Cross-Site Scripting vulnerability in Netwin Surgemail Cross-site scripting (XSS) vulnerability in NetWin Surgemail before 4.3g allows remote attackers to inject arbitrary web script or HTML via the username_ex parameter to the surgeweb program. | 4.3 |
2008-06-25 | CVE-2008-2859 | Denial of Service vulnerability in SurgeMail IMAP Command Unspecified vulnerability in the IMAP service in NetWin SurgeMail before 3.9g2 allows remote attackers to cause a denial of service (daemon crash) via unknown vectors related to an "imap command." | 5.0 |