Vulnerabilities > Openfind > Mail2000 > 8.0

DATE CVE VULNERABILITY TITLE RISK
2024-07-15 CVE-2024-6741 Unspecified vulnerability in Openfind Mail2000 7.0/8.0
Openfind's Mail2000 has a vulnerability that allows the HttpOnly flag to be bypassed.
network
low complexity
openfind
5.3
2024-07-15 CVE-2024-6740 Unspecified vulnerability in Openfind Mail2000 7.0/8.0
Openfind's Mail2000 does not properly validate email atachments, allowing unauthenticated remote attackers to inject JavaScript code within the attachment and perform Stored Cross-site scripting attacks.
network
low complexity
openfind
6.1