VendorsNetWinsurgemail3.5b3
Vulnerabilities

NetWin Surgemail 3.5b3

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2008-1497
Stack-based buffer overflow in the IMAP service in NetWin SurgeMail 38k4-4 and earlier allows remote authenticated users to execute arbitrary code via long arguments to the LSUB command.
Published 2008-03-25 · Modified
9.0EPSS 0.063
CVE-2010-3201
Cross-site scripting (XSS) vulnerability in NetWin Surgemail before 4.3g allows remote attackers to inject arbitrary web script or HTML via the username_ex parameter to the surgeweb program.
Published 2011-01-07 · Modified
4.31 PoCEPSS 0.031