Vulnerabilities > Smartertools > Smartermail > 16.3.6855

DATE CVE VULNERABILITY TITLE RISK
2021-11-17 CVE-2021-32234 Unspecified vulnerability in Smartertools Smartermail
SmarterTools SmarterMail 16.x through 100.x before 100.0.7803 allows remote code execution.
network
low complexity
smartertools
7.5
2021-11-17 CVE-2021-43977 Cross-site Scripting vulnerability in Smartertools Smartermail
SmarterTools SmarterMail 16.x through 100.x before 100.0.7803 allows XSS.
4.3
2021-09-08 CVE-2021-40377 Cross-site Scripting vulnerability in Smartertools Smartermail
SmarterTools SmarterMail 16.x before build 7866 has stored XSS.
3.5
2021-08-17 CVE-2020-29548 Command Injection vulnerability in Smartertools Smartermail
An issue was discovered in SmarterTools SmarterMail through 100.0.7537.
6.8
2021-07-06 CVE-2021-32233 Cross-site Scripting vulnerability in Smartertools Smartermail
SmarterTools SmarterMail before Build 7776 allows XSS.
4.3
2019-04-24 CVE-2019-7214 Deserialization of Untrusted Data vulnerability in Smartertools Smartermail
SmarterTools SmarterMail 16.x before build 6985 allows deserialization of untrusted data.
network
low complexity
smartertools CWE-502
critical
9.8
2019-04-24 CVE-2019-7213 Path Traversal vulnerability in Smartertools Smartermail
SmarterTools SmarterMail 16.x before build 6985 allows directory traversal.
network
low complexity
smartertools CWE-22
5.5
2019-04-24 CVE-2019-7212 Use of Hard-coded Credentials vulnerability in Smartertools Smartermail
SmarterTools SmarterMail 16.x before build 6985 has hardcoded secret keys.
network
low complexity
smartertools CWE-798
6.4
2019-04-24 CVE-2019-7211 Cross-site Scripting vulnerability in Smartertools Smartermail
SmarterTools SmarterMail 16.x before build 6995 has stored XSS.
4.3