Vulnerabilities (CVE)

Filtered by vendor Mailenable Subscribe
Filtered by product Mailenable Enterprise
Total 30 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2006-3277 1 Mailenable 2 Mailenable Enterprise, Mailenable Professional 2025-04-03 5.0 MEDIUM N/A
The SMTP service of MailEnable Standard 1.92 and earlier, Professional 2.0 and earlier, and Enterprise 2.0 and earlier before the MESMTPC hotfix, allows remote attackers to cause a denial of service (application crash) via a HELO command with a null byte in the argument, possibly triggering a length inconsistency or a missing argument.
CVE-2005-3690 1 Mailenable 2 Mailenable Enterprise, Mailenable Professional 2025-04-03 7.5 HIGH N/A
Stack-based buffer overflow in the IMAP service (meimaps.exe) of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to execute arbitrary code via a long mailbox name in the (1) select, (2) create, (3) delete, (4) rename, (5) subscribe, or (6) unsubscribe commands.
CVE-2004-2194 1 Mailenable 2 Mailenable Enterprise, Mailenable Professional 2025-04-03 5.0 MEDIUM N/A
MailEnable Professional Edition before 1.53 and Enterprise Edition before 1.02 allows remote attackers to cause a denial of service (crash) via malformed (1) SMTP or (2) IMAP commands.
CVE-2004-2501 1 Mailenable 2 Mailenable Enterprise, Mailenable Professional 2025-04-03 7.5 HIGH N/A
Buffer overflow in the IMAP service of MailEnable Professional Edition 1.52 and Enterprise Edition 1.01 allows remote attackers to execute arbitrary code via (1) a long command string or (2) a long string to the MEIMAP service and then terminating the connection.
CVE-2005-1014 1 Mailenable 2 Mailenable Enterprise, Mailenable Professional 2025-04-03 7.5 HIGH N/A
Buffer overflow in the IMAP service for MailEnable Enterprise 1.04 and earlier and Professional 1.54 allows remote attackers to execute arbitrary code via a long AUTHENTICATE command.
CVE-2005-4457 1 Mailenable 1 Mailenable Enterprise 2025-04-03 7.5 HIGH N/A
MailEnable Enterprise 1.1 before patch ME-10009 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via several "..." (triple dot) sequences in a UID FETCH command.
CVE-2005-1348 1 Mailenable 2 Mailenable Enterprise, Mailenable Professional 2025-04-03 7.5 HIGH N/A
Buffer overflow in HTTPMail in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote attackers to execute arbitrary code via a long HTTP Authorization header.
CVE-2005-3813 1 Mailenable 2 Mailenable Enterprise, Mailenable Professional 2025-04-03 4.0 MEDIUM N/A
IMAP service (meimaps.exe) of MailEnable Professional 1.7 and Enterprise 1.1 allows remote authenticated attackers to cause a denial of service (application crash) by using RENAME with a non-existent mailbox, a different vulnerability than CVE-2005-3690.
CVE-2005-3993 1 Mailenable 2 Mailenable Enterprise, Mailenable Professional 2025-04-03 7.8 HIGH N/A
Multiple unspecified vulnerabilities in MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allow attackers to cause a denial of service (crash) via invalid IMAP commands.
CVE-2006-4616 1 Mailenable 3 Mailenable Enterprise, Mailenable Professional, Mailenable Standard 2025-04-03 5.0 MEDIUM N/A
SMTP service in MailEnable Standard, Professional, and Enterprise before ME-10014 (20060904) allows remote attackers to cause a denial of service via an SPF lookup for a domain with a large number of records, which triggers a null pointer exception.