Email server

This hub aggregates every CVE we track for Email server, a product in the communications space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 9 most recently published vulnerabilities affecting Email server.

• CVE-2025-3929Stored XSS vulnerability in MDaemon Email Server6.1Apr 29, 2025
• CVE-2024-11182Stored XSS vulnerability in MDaemon Email ServerKEV6.1Nov 15, 2024
• CVE-2009-1468Multiple SQL injection vulnerabilities in the search form in server/webmail.php in the Groupware component in IceWarp eMail Server and WebMail Server before 9.4.2 allow remote authenticated users t...6.5May 5, 2009
• CVE-2009-1469CRLF injection vulnerability in the Forgot Password implementation in server/webmail.php in IceWarp eMail Server and WebMail Server before 9.4.2 makes it easier for remote attackers to trick a user...4.3May 5, 2009
• CVE-2009-1467Multiple cross-site scripting (XSS) vulnerabilities in IceWarp eMail Server and WebMail Server before 9.4.2 allow remote attackers to inject arbitrary web script or HTML via (1) the body of a messa...4.3May 5, 2009
• CVE-2008-3607The IMAP server in NoticeWare Email Server NG 4.6.3 and earlier allows remote attackers to cause a denial of service (daemon crash) via multiple long LOGIN commands.5.0Aug 12, 2008
• CVE-2008-1713MailServer.exe in NoticeWare Email Server 4.6.1.0 allows remote attackers to cause a denial of service (application crash) via a long string to IMAP port (143/tcp).5.0Apr 9, 2008
• CVE-2006-3108Cross-site scripting (XSS) vulnerability in EmailArchitect Email Server 6.1 allows remote attackers to inject arbitrary Javascript via an HTML div tag with a carriage return between the onmouseover...4.3Jun 21, 2006
• CVE-2006-2974Multiple cross-site scripting (XSS) vulnerabilities in EmailArchitect Email Server 6.1.0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) errCode and (2) uid ...2.6Jun 12, 2006