VendorsNetWinsurgemail3.8k4
Vulnerabilities

NetWin Surgemail 3.8k4

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2008-2859
Unspecified vulnerability in the IMAP service in NetWin SurgeMail before 3.9g2 allows remote attackers to cause a denial of service (daemon crash) via unknown vectors related to an "imap command."
Published 2008-06-25 · Modified
5.01 PoCEPSS 0.034
CVE-2010-3201
Cross-site scripting (XSS) vulnerability in NetWin Surgemail before 4.3g allows remote attackers to inject arbitrary web script or HTML via the username_ex parameter to the surgeweb program.
Published 2011-01-07 · Modified
4.31 PoCEPSS 0.031