mail Vulnerabilities
208 vulnerabilities related to mail
- PoC2026-08-18afterlogic-path-disclosure: AfterLogic Aurora and WebMail Pro < 7.7.9 - Full Path Disclosure
- PoC2026-06-17cpanel-mailman-xss: cPanel Mailman - Cross-Site Scripting
- PoC2026-05-09CVE-2026-24423: SmarterMail - Remote Code Execution
- PoC2026-05-09CVE-2026-40878: Mailcow < 2026-03b - Href Link Injection
- 2026-04-16網擎資訊｜MailGates/MailAudit - 存在2個漏洞
- PoC2026-03-25CVE-2026-2025: Mail Mint < 1.19.5 - Unauthenticated Email Disclosure
- PoC2026-03-25CVE-2026-23829: Mailpit < 1.28.2 - SMTP CRLF Injection
- 2026-03-10Mailpit CVE-2026-21859 ssrf
- PoC2026-02-27CVE-2022-0439: Email Subscribers & Newsletters <= 5.3.1 - Authenticated SQL Injection
- PoC2026-02-24CVE-2024-13098: WordPress Email Newsletter - Reflected XSS
- 2026-02-06Mailpit /proxy 服务器端请求伪造漏洞（CVE-2026-21859）
- PoC2026-01-29SmarterMail ConnectToHub /api/v1/settings/sysadmin/connect-to-hub 命令执行漏洞（CVE-2026-24423）
- 2026-01-29SmarterMail ConnectToHub /api/v1/settings/sysadmin/connect-to-hub 命令执行漏洞（CVE-2026-24423）
- 2026-01-28SmarterTools SmarterMail 远程代码执行漏洞(CVE-2026-24423)
- 2026-01-28SmarterTools SmarterMail 权限管理不当漏洞
- PoC2026-01-24CVE-2026-21859: Mailpit < 1.28.3 - Server-Side Request Forgery
- PoC2026-01-24CVE-2026-23760: SmarterTools SmarterMail - Admin Password Reset
- PoC2026-01-24sendmail-forward-exposure: Sendmail .forward File - Exposure
- PoC2026-01-22SmarterMail /api/v1/auth/force-reset-password 权限绕过漏洞
- 2026-01-22SmarterMail 存在任意文件上传漏洞
- 2026-01-22SmarterMail 存在任意密码重置漏洞
- 2026-01-22SmarterMail /api/v1/auth/force-reset-password 权限绕过漏洞
- 2026-01-12Smartertools Smartermail 未授权 文件上传限制不当漏洞
- PoC2026-01-09CVE-2025-52691: SmarterMail - Unrestricted File Upload
- PoC2026-01-08CVE-2021-20617: Acmailer - Improper Access Control to OS Command Injection
- PoC2026-01-08roundcube-installer-exposure: Roundcube Webmail Installer - Exposure
- PoC2026-01-08wp-wp-mail-smtp-fpd: WordPress WP Mail SMTP - Full Path Disclosure
- PoC2025-11-07mailgun-takeover: Mailgun Takeover Detection
- 2025-09-26TurboMail mailmain 信息泄露漏洞
- 2025-09-01CNVD-2019-16798: Coremail Information Disclosure
- 2025-09-01CVE-2019-19985: WordPress Plugin Email Subscribers & Newsletters 4.2.2 - Unauthenticated File Download
- 2025-09-01wordpress-ext-mailpress-rce: Wordpress Ext Mailpress RCE
- 2025-09-01coremail-manager-password-disclosure: Coremail 邮件系统未授权访问获取管理员账密
- 2025-08-20IceWarp Mail Server ≤11.4.0存在重定向漏洞(CVE-2025-40630)
- 2025-08-04Richmail 邮件系统openapiservice 存在任意文件上传漏洞
- PoC2025-08-01CVE-2002-1131: SquirrelMail 1.2.6/1.2.7 - Cross-Site Scripting
- PoC2025-08-01CVE-2004-0519: SquirrelMail 1.4.x - Folder Name Cross-Site Scripting
- PoC2025-08-01CVE-2006-2842: Squirrelmail <=1.4.6 - Local File Inclusion
- PoC2025-08-01CVE-2010-1532: Joomla! Component PowerMail Pro 1.5.3 - Local File Inclusion
- PoC2025-08-01CVE-2012-4940: Axigen Mail Server Filename Directory Traversal
- PoC2025-08-01CVE-2014-1203: Eyou E-Mail <3.6 - Remote Code Execution
- PoC2025-08-01CVE-2015-1503: IceWarp Mail Server <11.1.1 - Directory Traversal
- PoC2025-08-01CVE-2016-1000146: WordPress Pondol Form to Mail <=1.1 - Cross-Site Scripting
- PoC2025-08-01CVE-2016-10033: WordPress PHPMailer < 5.2.18 - Remote Code Execution
- PoC2025-08-01CVE-2016-10956: WordPress Mail Masta 1.0 - Local File Inclusion
- PoC2025-08-01CVE-2017-17451: WordPress Mailster <=1.5.4 - Cross-Site Scripting
- PoC2025-08-01CVE-2017-7855: IceWarp WebMail 11.3.1.5 - Cross-Site Scripting
- PoC2025-08-01CVE-2019-12593: IceWarp Mail Server <=10.4.4 - Local File Inclusion
- PoC2025-08-01CVE-2019-13392: MindPalette NateMail 3.0.15 - Cross-Site Scripting
- PoC2025-08-01CVE-2019-19985: WordPress Email Subscribers & Newsletters <4.2.3 - Arbitrary File Retrieval
- PoC2025-08-01CVE-2020-11546: SuperWebmailer 7.21.0.01526 - Remote Code Execution
- PoC2025-08-01CVE-2020-12641: Roundcube Webmail - Command Injection
- PoC2025-08-01CVE-2020-23517: Aryanic HighMail (High CMS) - Cross-Site Scripting
- PoC2025-08-01CVE-2020-27982: IceWarp WebMail 11.4.5.0 - Cross-Site Scripting
- PoC2025-08-01CVE-2020-8512: IceWarp WebMail Server <=11.4.4.1 - Cross-Site Scripting
- PoC2025-08-01CVE-2021-24288: WordPress AcyMailing <7.5.0 - Open Redirect
- PoC2025-08-01CVE-2021-26292: AfterLogic Aurora and WebMail Pro < 7.7.9 - Full Path Disclosure
- PoC2025-08-01CVE-2021-26294: AfterLogic Aurora and WebMail Pro < 7.7.9 - Information Disclosure
- PoC2025-08-01CVE-2021-36580: IceWarp Mail Server - Open Redirect
- PoC2025-08-01CVE-2021-43062: Fortinet FortiMail 7.0.1 - Cross-Site Scripting
- PoC2025-08-01CVE-2021-43574: Atmail 6.5.0 - Cross-Site Scripting
- PoC2025-08-01CVE-2022-0218: HTML Email Template Designer < 3.1 - Missing Authorization on Rest Route
- PoC2025-08-01CVE-2022-0846: SpeakOut Email Petitions < 2.14.15.1 - SQL Injection
- PoC2025-08-01CVE-2022-30776: Atmail 6.5.0 - Cross-Site Scripting
- PoC2025-08-01CVE-2022-31470: Axigen WebMail - Cross-Site Scripting
- PoC2025-08-01CVE-2023-2518: WordPress Easy Forms for Mailchimp Plugin < 6.8.9 - Cross-Site Scripting
- PoC2025-08-01CVE-2023-37728: IceWarp Webmail Server v10.2.1 - Cross Site Scripting
- PoC2025-08-01CVE-2023-38192: SuperWebMailer 9.00.0.01710 - Cross-Site Scripting
- PoC2025-08-01CVE-2023-38194: SuperWebMailer - Cross-Site Scripting
- PoC2025-08-01CVE-2023-39598: IceWarp Email Client - Cross Site Scripting
- PoC2025-08-01CVE-2023-39700: IceWarp Mail Server v10.4.5 - Cross-Site Scripting
- PoC2025-08-01CVE-2023-40355: Axigen WebMail - Cross-Site Scripting
- PoC2025-08-01CVE-2023-40779: IceWarp Mail Server Deep Castle 2 v.13.0.1.2 - Open Redirect
- PoC2025-08-01CVE-2023-6875: WordPress POST SMTP Mailer <= 2.8.7 - Authorization Bypass
- PoC2025-08-01CVE-2024-24131: SuperWebMailer 9.31.0.01799 - Cross-Site Scripting
- PoC2025-08-01CVE-2024-2876: Wordpress Email Subscribers by Icegram Express - SQL Injection
- PoC2025-08-01CVE-2024-32399: RaidenMAILD Mail Server v.4.9.4 - Path Traversal
- PoC2025-08-01CVE-2024-34470: HSC Mailinspector 5.2.17-3 through 5.2.18 - Local File Inclusion
- PoC2025-08-01CVE-2024-4295: Email Subscribers by Icegram Express <= 5.7.20 - Unauthenticated SQL Injection via Hash
- PoC2025-08-01CVE-2025-40630: IceWarp Mail Server ≤11.4.0 - Open Redirect
- PoC2025-08-01CVE-2025-44148: MailEnable Mail Service < v10 - Cross-Site Scripting
- PoC2025-08-01CVE-2025-49113: Roundcube Webmail - Remote Code Execution
- PoC2025-08-01CVE-2025-49113: Roundcube Webmail - Remote Code Execution
- PoC2025-08-01rainloop-default-login: Rainloop WebMail - Default Admin Login
- PoC2025-08-01entsoft-crm-mailaction-entphone-fileupload: 浙大恩特CRM/entsoft/MailAction.entphone;.js?method=loadFile任意文件上传
- PoC2025-08-01sendmail-postfix-execution-restrictions: Sendmail/Postfix Execution Restrictions Misconfigured
- PoC2025-08-01mailru-connect-csp-bypass: Content-Security-Policy Bypass - Mail.ru Connect
- PoC2025-08-01mailchimp-api-key: Mailchimp API Key
- PoC2025-08-01mailgun-api-key: Mailgun API Key
- PoC2025-08-01CNVD-2021-26422: eYouMail - Remote Code Execution
- PoC2025-08-01CVE-2005-3128: SquirrelMail Address Add 1.4.2 - Cross-Site Scripting
- PoC2025-08-01CVE-2021-20021: SonicWall Email Security <= 10.0.9.x - Unauthenticated Admin Account Creation
- PoC2025-08-01CVE-2024-42009: Roundcube Webmail - Cross-Site Scripting
- PoC2025-08-01rainloop-default-login: Rainloop WebMail - Default Admin Login
- PoC2025-08-01coremail-config-disclosure: Coremail - Config Discovery
- PoC2025-08-01git-mailmap: Git Mailmap File Disclosure
- PoC2025-08-01squirrelmail-lfi: SquirrelMail 1.2.11 - Local File Inclusion
- PoC2025-08-01squirrelmail-vkeyboard-xss: SquirrelMail Virtual Keyboard <=0.9.1 - Cross-Site Scripting
- PoC2025-08-01wp-email-subscribers-listing: WordPress Plugin Email Subscribers Listing
- PoC2025-08-01wp-mailchimp-log-exposure: WordPress MC4WP - Debug Log Exposure
- PoC2025-08-01wp-woocommerce-email-verification: Email Verification for WooCommerce < 1.8.2 - Loose Comparison to Authentication Bypass
- PoC2025-08-01roundcube-webmail: Roundcube webmail
- 2025-07-10朗阁 maildata 命令执行漏洞
- 2025-07-03TurboMail 任意用户登录漏洞
- 2025-06-19MailEnable-Failure.aspx页面存在反射XSS(CVE-2025-44148)
- 2025-06-13Roundcube Webmail代码执行漏洞(CVE-2025-49113)
- 2025-05-16Eyou Mail System /webadm/?q=moni_detail.do&action=gragh 代码执行漏洞 （CVE-2014-1203）
- 2025-05-16Eyou Mail System /webadm/?q=moni_detail.do&action=gragh 代码执行漏洞 （CVE-2014-1203）
- 2025-04-25HSC Mailinspector 任意文件读取漏洞（CVE-2024-34470）
- 2025-04-25HSC Mailinspector 任意文件读取漏洞（CVE-2024-34470）
- 2025-03-31（CVE-2023-33302）Fortinet FortiMail和FortiNDR缓冲区溢出漏洞
- 2025-01-27WordPress plugin WP Contact Form7 Email Spam Blocker 跨站脚本漏洞
- 2025-01-27WordPress plugin Contact Form Email 跨站脚本漏洞
- 2024-10-28WordPress plugin Forms for Mailchimp by Optin Cat 跨站脚本漏洞
- 2024-09-06coremail ssrf/任意文件读取漏洞
- 2024-08-09Atmail CVE-2024-24133 login SQL注入漏洞
- PoC2024-08-09Atmail存在SQL注入漏洞
- 2024-08-06魔方网表 mailupdate 任意文件上传漏洞
- 2024-07-18亿赛通 EmailAuditService 不安全的反序列化漏洞
- 2024-06-21Richmail 邮件系统 openapiservice 存在任意文件上传漏洞
- 2024-06-14WordPress plugin Easy Forms for Mailchimp 日志信息泄露漏洞
- 2024-06-03HSC Mailinspector 存在目录遍历漏洞(CVE-2024-34470)
- 2024-05-05SuperWebMailer api.php 存在XSS漏洞 (CVE-2024-24131)
- 2024-04-26RaidenMAILD邮件服务器 webeditor 存在任意文件读取漏洞
- 2024-04-23Coremail 邮件系统存在远程命令执行漏洞
- 2024-04-23Coremail 邮件系统存在任意文件读取漏洞
- 2024-04-23Coremail 邮件系统存在鉴权绕过漏洞
- 2024-04-23Coremail 邮件系统 Tomcat 后台存在鉴权绕过漏洞
- 2024-04-16Coremail XT5/XT6 远程代码执行漏洞
- 2024-04-12Coremail 邮件系统 apiTest 接口存在远程命令执行
- 2024-04-12Coremail 邮件系统存在弱口令漏洞
- 2024-04-09广州拓波软件科技有限公司 TurboMail系统任意用户登录
- 2024-04-07广州拓波软件科技有限公司 TurboMail 邮件系统 outImg文件读取漏洞
- 2024-03-21Roundcube Webmail rcube_washtml.php CVE-2023-5631 存储型跨站脚本漏洞
- 2024-03-21Roundcube Webmail rcube_washtml.php CVE-2023-5631 存储型跨站脚本漏洞
- 2024-03-18(CVE-2023-40747) A.K.I Software PMailServer/PMailServer2 输入验证漏洞
- 2024-03-07Roundcube Webmail CVE-2021-44026 SQL注入漏洞
- 2024-02-29Roundcube Webmail rcube_string_replacer.php 跨站脚本漏洞
- 2024-02-28Acmailer邮件系统 init_ctl.cgi 远程命令执行
- 2024-02-22Mailcow syncjob 命令注入漏洞
- 2024-02-22Fortinet FortiMail CVE-2021-43062跨站脚本漏洞
- 2024-02-22Horde Groupware Webmail Edition PHP反序列化漏洞
- 2024-02-07IceWarp Mail Server CVE-2023-39699 目录遍历漏洞
- 2023-12-21广州拓波软件科技有限公司 TurboMail 邮件系统 viewfile 文件读取漏洞
- 2023-12-13Fortinet多个产品跨站请求伪造漏洞(CVE-2022-27488)
- 2023-09-04Horde Groupware Webmail Edition /imp/test.php 远程命令执行漏洞
- 2023-08-21Coremail 邮件系统 邮件处理模块存在远程代码执行漏洞
- 2023-08-18Richmail 邮件系统未授权访问获取管理员密码
- 2023-08-16Coremail 邮件系统未授权访问获取管理员账密
- 2023-08-01AtMail 6.5.0反射型XSS漏洞(CVE-2022-30776)
- 2023-07-28Acmailer 邮件系统 init_ctl.cgi 文件 sendmail_path 参数远程命令执行漏洞（CVE-2021-20617）
- 2023-07-28Acmailer 邮件系统 enq_form.cgi 认证绕过漏洞（CVE-2021-20618）
- 2023-07-28Acmailer 邮件系统 init_ctl.cgi 文件 sendmail_path 参数远程命令执行漏洞（CVE-2021-20617）
- 2023-07-28Acmailer 邮件系统 enq_form.cgi 认证绕过漏洞（CVE-2021-20618）
- 2023-06-30IceWarp Mail Server referer参数存在重定向漏洞(CVE-2021-36580)
- 2023-04-13IceWarp WebMail Server <=11.4.4.1 XSS(CVE-2020-8512)
- 2023-04-13IceWarp Mail Server <=10.4.4 LFI (CVE-2019-12593)
- 2023-03-27U-mail FCGI 解析漏洞
- 2023-03-27YMail 反垃圾邮件系统 /cgi/index.cgi 路径存在SQL注入漏洞
- 2022-07-04SuperWebmailer 7.21.0.01526 远程命令执行 (CVE-2020-11546)
- 2022-06-20WordPress插件Email Subscribers & Newsletters信息泄露(CVE-2019-19985)
- 2022-05-17(CVE-2013-10001) HTC One/Sense 4.x 权限提升漏洞
- 2022-02-09Coremail 邮件系统 /action.jsp 路径存在任意文件上传漏洞
- 2022-01-04TurboMail 敏感信息泄露
- 2022-01-04TurboMail 用户名枚举
- 2021-11-15Afterlogic Aurora & WebMail Pro 任意文件读取(CVE-2021-26294)
- 2021-04-30Coremail 邮件系统任意文件上传漏洞
- 2021-04-28Coremail邮件系统权限绕过漏洞
- 2021-04-28Coremail邮件系统Tomcat管理页面默认密码漏洞
- 2021-01-19Coremail论客邮件系统存在信息泄露漏洞(CNVD-2019-16798)
- 2021-01-19YMail反垃圾邮件系统 /ymail/cgi/index.cgi-HTTP头注入漏洞
- 2021-01-19Winmail Server-任意文件下载
- 2021-01-19U-Mail-代码执行漏洞
- 2021-01-19Atmail WebAdmin-数据库配置文件泄漏
- 2021-01-19U-Mail phpinfo.php-文件信息泄露
- 2021-01-19TodayMail邮件系统-SQL注入
- 2021-01-19TodayMail 2.3.0邮件系统-SQL注入
- 2021-01-19Email Marketer邮件收发管理工具index.php-登录绕过漏洞(CVE-2017-14322)
- 2019-06-15Coremail 邮件系统 mailsms 模块敏感信息泄露致任意用户登陆
- 2018-09-07Kamailio up to 5.0.6/5.1.3 SIP Message crcitt_string_array 拒绝服务漏洞
- 2016-10-06WordPress MailCWP插件任意文件上传漏洞
- 2008-11-05U-Mail 'edit.php' 任意文件上传漏洞
- 基點資訊 Secure Email Gateway - Buffer Overflow
- 村榮資訊雷電MAILD遠端管理系統 - Arbitrary File Reading through Path Traversal
- 中華數位科技 Mail SQR Expert 與 Mail Archiving Expert - OS Command Injection
- 網擎資訊 Mail2000 - HttpOnly flag bypass
- 網擎資訊 Mail2000 - Stored XSS
- 基點資訊 Secure Email Gateway - Stack-based Buffer Overflow
- 網擎資訊 MailGates與MailAudit - Sensitive Cookie Without 'HttpOnly' Flag
- 網擎資訊 MailGates 與 MailAudit - OS Command Injection
- 網擎資訊 Mail2000 - OS Command Injection
- 網擎資訊 Mail2000 - OS Command Injection
- 中華數位科技 Mail SQR Expert - Path Traversal
- 中華數位科技 Mail SQR Expert - Blind Server-Side Request Forgey (SSRF)
- 中華數位科技 Mail SQR Expert - Command Injection
- 中華數位科技 Mail SQR Expert - Local File Inclusion-1
- 中華數位科技 Mail SQR Expert - Local File Inclusion-2
- Openfind Mail2000 - XSS (Reflected Cross-site scripting)
- HGiga MailSherlock - Broken Access Control
- HGiga MailSherlock - Command Injection
- HGiga MailSherlock - SQL Injection
- HGiga MailSherlock - Reflected XSS
- Openfind Mail2000 - XSS
- 村榮資訊 雷電MAILD Mail Server -- Cross-Site Scripting
- 村榮資訊 雷電MAILD Mail Server -- Formula Injection
- 中華數位科技 Mail SQR Expert 全方位電子郵件管理專家 - Local File Inclusion
- 中華數位科技 Mail SQR Expert 全方位電子郵件管理專家 - Command Injection
- 繹宇數位科技 MailHunter Ultimate電子郵件行銷追蹤分析系統 - Deserialization of Untrusted Data