Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2007-0651

Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Professional before 2.37 allow remote attackers to inject arbitrary Javascript script via (1) e-mail messages and (2) the ID parameter to (a) right.asp, (b) Forms/MAI/list.asp, and (c) Forms/VCF/list.asp in mewebmail/base/default/lang/EN/.

Published

2007-02-15T23:28:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 4.3 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: PARTIAL
Availability Impact: NONE

Exploitability Score

8.6

Impact Score

2.9

Weaknesses

Type: Primary
NVD-CWE-Other

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	mailenable	mailenable_professional	1.0.004	Yes
Application	mailenable	mailenable_professional	1.0.005	Yes
Application	mailenable	mailenable_professional	1.0.006	Yes
Application	mailenable	mailenable_professional	1.0.007	Yes
Application	mailenable	mailenable_professional	1.0.008	Yes
Application	mailenable	mailenable_professional	1.0.009	Yes
Application	mailenable	mailenable_professional	1.0.010	Yes
Application	mailenable	mailenable_professional	1.0.011	Yes
Application	mailenable	mailenable_professional	1.0.012	Yes
Application	mailenable	mailenable_professional	1.0.013	Yes
Application	mailenable	mailenable_professional	1.0.014	Yes
Application	mailenable	mailenable_professional	1.0.015	Yes
Application	mailenable	mailenable_professional	1.0.016	Yes
Application	mailenable	mailenable_professional	1.0.017	Yes
Application	mailenable	mailenable_professional	1.1	Yes
Application	mailenable	mailenable_professional	1.2	Yes
Application	mailenable	mailenable_professional	1.2a	Yes
Application	mailenable	mailenable_professional	1.5	Yes
Application	mailenable	mailenable_professional	1.6	Yes
Application	mailenable	mailenable_professional	1.7	Yes
Application	mailenable	mailenable_professional	1.12	Yes
Application	mailenable	mailenable_professional	1.13	Yes
Application	mailenable	mailenable_professional	1.14	Yes
Application	mailenable	mailenable_professional	1.15	Yes
Application	mailenable	mailenable_professional	1.16	Yes
Application	mailenable	mailenable_professional	1.17	Yes
Application	mailenable	mailenable_professional	1.18	Yes
Application	mailenable	mailenable_professional	1.19	Yes
Application	mailenable	mailenable_professional	1.51	Yes
Application	mailenable	mailenable_professional	1.52	Yes
Application	mailenable	mailenable_professional	1.53	Yes
Application	mailenable	mailenable_professional	1.54	Yes
Application	mailenable	mailenable_professional	1.72	Yes
Application	mailenable	mailenable_professional	1.73	Yes
Application	mailenable	mailenable_professional	1.82	Yes
Application	mailenable	mailenable_professional	1.83	Yes
Application	mailenable	mailenable_professional	1.84	Yes
Application	mailenable	mailenable_professional	1.101	Yes
Application	mailenable	mailenable_professional	1.102	Yes
Application	mailenable	mailenable_professional	1.103	Yes
Application	mailenable	mailenable_professional	1.104	Yes
Application	mailenable	mailenable_professional	1.105	Yes
Application	mailenable	mailenable_professional	1.106	Yes
Application	mailenable	mailenable_professional	1.107	Yes
Application	mailenable	mailenable_professional	1.108	Yes
Application	mailenable	mailenable_professional	1.109	Yes
Application	mailenable	mailenable_professional	1.110	Yes
Application	mailenable	mailenable_professional	1.111	Yes
Application	mailenable	mailenable_professional	1.112	Yes
Application	mailenable	mailenable_professional	1.113	Yes
Application	mailenable	mailenable_professional	1.114	Yes
Application	mailenable	mailenable_professional	1.115	Yes
Application	mailenable	mailenable_professional	1.116	Yes
Application	mailenable	mailenable_professional	2.0	Yes
Application	mailenable	mailenable_professional	2.1	Yes
Application	mailenable	mailenable_professional	2.2	Yes
Application	mailenable	mailenable_professional	2.32	Yes
Application	mailenable	mailenable_professional	2.33	Yes
Application	mailenable	mailenable_professional	2.34	Yes
Application	mailenable	mailenable_professional	2.35	Yes
Application	mailenable	mailenable_professional	2.351	Yes

References

http://osvdb.org/33188 ([email protected])
http://osvdb.org/33189 ([email protected])
http://osvdb.org/33190 ([email protected])
http://secunia.com/advisories/23998 Patch, Vendor Advisory ([email protected])
http://secunia.com/secunia_research/2007-38/advisory/ Patch, Vendor Advisory ([email protected])
http://securityreason.com/securityalert/2258 ([email protected])
http://www.mailenable.com/Professional20-ReleaseNotes.txt ([email protected])
http://www.securityfocus.com/archive/1/460063/100/0/threaded ([email protected])
http://www.securityfocus.com/bid/22554 ([email protected])
http://www.vupen.com/english/advisories/2007/0595 ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/32476 ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/32480 ([email protected])
http://osvdb.org/33188 (af854a3a-2127-422b-91ae-364da2661108)
http://osvdb.org/33189 (af854a3a-2127-422b-91ae-364da2661108)
http://osvdb.org/33190 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/23998 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/secunia_research/2007-38/advisory/ Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://securityreason.com/securityalert/2258 (af854a3a-2127-422b-91ae-364da2661108)
http://www.mailenable.com/Professional20-ReleaseNotes.txt (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/460063/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/22554 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2007/0595 (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/32476 (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/32480 (af854a3a-2127-422b-91ae-364da2661108)