Vulnerabilities > Spamtitan > Spamtitan > 5.08
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2014-07-03 | CVE-2014-2965 | Cross-Site Scripting vulnerability in Spamtitan Cross-site scripting (XSS) vulnerability in auth-settings-x.php in SpamTitan before 6.04 allows remote attackers to inject arbitrary web script or HTML via the sortdir parameter. | 4.3 |
| 2012-08-31 | CVE-2011-5149 | Cross-Site Scripting vulnerability in Spamtitan Multiple cross-site scripting (XSS) vulnerabilities in SpamTitan 5.08 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) testaddr or (2) testpass parameter to auth-settings.php; (3) hostname, (4) domainname, or (5) mailserver parameter to setup-relay.php; or (6) subnetmask or (7) defaultroute parameter to setup-network.php. | 4.3 |