Skip to content
Noroxi

Atmail records

32 published records for vendor atmail.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 20
  3. 21
  4. 22
  5. 23
  6. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

32 records
  • CVE-2013-5034
    41Plan

    Unspecified vulnerability in Atmail before 6.6.4, and 7.x before 7.1.2, has unknown impact and attack vectors, a different vulnerability tha

    CriticalCVSS 10.0No exploitEPSS 2%

    atmail · atmailJan 12, 2014

  • CVE-2013-5033
    41Plan

    Unspecified vulnerability in Atmail before 6.6.4, and 7.x before 7.1.2, has unknown impact and attack vectors, a different vulnerability tha

    CriticalCVSS 10.0No exploitEPSS 2%

    atmail · atmailJan 12, 2014

  • CVE-2013-5032
    41Plan

    Unspecified vulnerability in Atmail before 6.6.4, and 7.x before 7.1.2, has unknown impact and attack vectors, a different vulnerability tha

    CriticalCVSS 10.0No exploitEPSS 2%

    atmail · atmailJan 12, 2014

  • CVE-2013-5031
    41Plan

    Unspecified vulnerability in Atmail before 6.6.4, and 7.x before 7.1.2, has unknown impact and attack vectors, a different vulnerability tha

    CriticalCVSS 10.0No exploitEPSS 2%

    atmail · atmailJan 12, 2014

  • CVE-2024-24133
    39Monitor

    Atmail v6.6.0 was discovered to contain a SQL injection vulnerability via the username parameter on the login page.

    CriticalCVSS 9.8No exploitEPSS 1%

    atmail · atmailFeb 7, 2024

  • CVE-2017-9517
    35Monitor

    atmail before 7.8.0.2 has CSRF, allowing an attacker to upload and import users via CSV.

    HighCVSS 8.8No exploitEPSS 0%

    atmail · atmailJun 8, 2017

  • CVE-2017-9519
    35Monitor

    atmail before 7.8.0.2 has CSRF, allowing an attacker to create a user account.

    HighCVSS 8.8No exploitEPSS 0%

    atmail · atmailJun 8, 2017

  • CVE-2017-9518
    35Monitor

    atmail before 7.8.0.2 has CSRF, allowing an attacker to change the SMTP hostname and hijack all emails.

    HighCVSS 8.8No exploitEPSS 0%

    atmail · atmailJun 8, 2017

  • CVE-2012-1916
    31Monitor

    @Mail WebMail Client in AtMail Open-Source before 1.05 allows remote attackers to execute arbitrary code via an e-mail attachment with an ex

    HighCVSS 7.5No exploitEPSS 3%

    atmail · atmail openMar 27, 2012

  • CVE-2006-0611
    31Monitor

    Directory traversal vulnerability in compose.pl in @Mail 4.3 and earlier for Windows allows remote attackers to upload arbitrary files to ar

    HighCVSS 7.5No exploitEPSS 2%

    atmail · atmailFeb 8, 2006

  • CVE-2006-6701
    30Monitor

    Cross-site request forgery (CSRF) vulnerability in util.pl in @Mail WebMail 4.51, and util.php in 5.x before 5.03, allows remote attackers t

    HighCVSS 7.5No exploitEPSS 1%

    atmail · atmail webmailDec 22, 2006

  • CVE-2006-6702
    27Monitor

    Cross-site scripting (XSS) vulnerability in Global.pm in @Mail before 4.61 allows remote attackers to inject arbitrary web script or HTML vi

    MediumCVSS 6.8No exploitEPSS 1%

    atmail · atmail webmailDec 22, 2006

  • CVE-2007-2153
    27Monitor

    Cross-site scripting (XSS) vulnerability in atmail.php in @Mail 5.0 allows remote attackers to inject arbitrary web script or HTML via the u

    MediumCVSS 6.8No exploitEPSS 1%

    atmail · atmail webmailApr 19, 2007

  • CVE-2006-6704
    27Monitor

    Cross-site scripting (XSS) vulnerability in the Webadmin in @Mail before 4.6 allows remote attackers to inject arbitrary web script or HTML

    MediumCVSS 6.8No exploitEPSS 1%

    atmail · atmail webadminDec 22, 2006

  • CVE-2013-6028
    27Monitor

    Multiple cross-site request forgery (CSRF) vulnerabilities in Atmail Webmail Server before 7.2 allow remote attackers to hijack the authenti

    MediumCVSS 6.8No exploitEPSS 1%

    atmail · atmailJan 12, 2014

  • CVE-2012-2593
    26Monitor

    Cross-site scripting (XSS) vulnerability in the administrative interface in Atmail Webmail Server 6.4 allows remote attackers to inject arbi

    MediumCVSS 6.1Proof of conceptEPSS 6%

    atmail · atmailFeb 6, 2020

  • CVE-2012-1919
    26Monitor

    CRLF injection vulnerability in mime.php in @Mail WebMail Client in AtMail Open-Source before 1.05 allows remote attackers to conduct direct

    MediumCVSS 6.4No exploitEPSS 2%

    atmail · atmail openMar 27, 2012

  • CVE-2022-30776
    25Monitor

    atmail 6.5.0 allows XSS via the index.php/admin/index/ error parameter.

    MediumCVSS 6.1Proof of conceptEPSS 4%

    atmail · atmailMay 16, 2022

  • CVE-2021-43574
    25Monitor

    WebAdmin Control Panel in Atmail 6.5.0 (a version released in 2012) allows XSS via the format parameter to the default URI.

    MediumCVSS 6.1Proof of conceptEPSS 2%

    atmail · atmailNov 15, 2021

  • CVE-2017-11617
    24Monitor

    Cross-site scripting (XSS) vulnerability in atmail prior to version 7.8.0.2 allows remote attackers to inject arbitrary web script or HTML w

    MediumCVSS 6.1No exploitEPSS 1%

    atmail · atmailJul 25, 2017

  • CVE-2022-31200
    24Monitor

    Atmail 5.62 allows XSS via the mail/parse.php?file=html/$this-%3ELanguage/help/filexp.html&FirstLoad=1&HelpFile=file.html Search Terms field

    MediumCVSS 6.1No exploitEPSS 0%

    atmail · atmailJul 27, 2023

  • CVE-2012-1918
    21Monitor

    Multiple directory traversal vulnerabilities in (1) compose.php and (2) libs/Atmail/SendMsg.php in @Mail WebMail Client in AtMail Open-Sourc

    MediumCVSS 5.0No exploitEPSS 4%

    atmail · atmail openMar 27, 2012

  • CVE-2012-1920
    21Monitor

    @Mail WebMail Client in AtMail Open-Source 1.04 and earlier allows remote attackers to obtain configuration information via a direct request

    MediumCVSS 5.0No exploitEPSS 3%

    atmail · atmail openMar 27, 2012

  • CVE-2012-1917
    21Monitor

    compose.php in @Mail WebMail Client in AtMail Open-Source before 1.05 does not properly handle ../ (dot dot slash) sequences in the unique p

    MediumCVSS 5.0No exploitEPSS 2%

    atmail · atmail openMar 27, 2012

  • CVE-2013-6017
    18Monitor

    Cross-site scripting (XSS) vulnerability in Atmail Webmail Server before 7.2 allows remote attackers to inject arbitrary web script or HTML

    MediumCVSS 4.3Proof of conceptEPSS 4%

    atmail · atmailJan 12, 2014