hmailserver records

5 published records for vendor hmailserver.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

5 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
23Monitor	CVE-2013-5571No exploit	HMailServer 5.3.x and prior: Memory Corruption which could cause DOShmailserver · hmailserver · CWE-119 Pre-auth Memory safety Denial of service	Medium5.9	—	0.9%	Jan 7, 2020
20Monitor	CVE-2025-52372No exploit	An issue in hMailServer v.5.8.6 allows a local attacker to obtain sensitive information via the hmailserver/installation/hMailServerInnoExtehmailserver · hmailserver · CWE-200 Info leak	Medium5.1	—	0.2%	Jul 21, 2025
18Monitor	CVE-2008-3676Proof of concept	Unspecified vulnerability in the IMAP server in hMailServer 4.4.1 allows remote authenticated users to cause a denial of service (resource ehmailserver · hmailserver · CWE-20 Pre-auth Denial of service	Medium4.3	—	2.8%	Aug 14, 2008
18Monitor	CVE-2025-52373No exploit	Use of hardcoded cryptographic key in BlowFish.cpp in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords used in databasehmailserver · hmailserver · CWE-321 Hard-coded credentials	Medium4.6	—	0.3%	Jul 21, 2025
18Monitor	CVE-2025-52374No exploit	Use of hardcoded cryptographic key in Encryption.cs in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords to other serverhmailserver · hmailserver · CWE-321 Hard-coded credentials	Medium4.6	—	0.2%	Jul 21, 2025

CVE-2013-5571
23Monitor
HMailServer 5.3.x and prior: Memory Corruption which could cause DOS
MediumCVSS 5.9No exploitEPSS 1%
hmailserver · hmailserverJan 7, 2020
CVE-2025-52372
20Monitor
An issue in hMailServer v.5.8.6 allows a local attacker to obtain sensitive information via the hmailserver/installation/hMailServerInnoExte
MediumCVSS 5.1No exploitEPSS 0%
- Info leak
hmailserver · hmailserverJul 21, 2025
CVE-2008-3676
18Monitor
Unspecified vulnerability in the IMAP server in hMailServer 4.4.1 allows remote authenticated users to cause a denial of service (resource e
MediumCVSS 4.3Proof of conceptEPSS 3%
- Pre-auth
- Denial of service
hmailserver · hmailserverAug 14, 2008
CVE-2025-52373
18Monitor
Use of hardcoded cryptographic key in BlowFish.cpp in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords used in database
MediumCVSS 4.6No exploitEPSS 0%
- Hard-coded credentials
hmailserver · hmailserverJul 21, 2025
CVE-2025-52374
18Monitor
Use of hardcoded cryptographic key in Encryption.cs in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords to other server
MediumCVSS 4.6No exploitEPSS 0%
- Hard-coded credentials
hmailserver · hmailserverJul 21, 2025