MW
Product
Mdaemon Webmail
3
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 2Low 0
Watch
Add Mdaemon Webmail to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-17792 | 8.8 | Jul 19 | MDaemon Webmail (formerly WorldClient) has CSRF Affected: 14.0 |
| CVE-2020-18724 | 5.4 | Feb 3 | Authenticated stored cross-site scripting (XSS) in the contact name field in the distribution list of MDaemon webmail 19.5.5 allows an attacker to executes code and perform a XSS… Affected: before 20.0.1 |
| CVE-2020-18723 | 5.4 | Feb 3 | Stored cross-site scripting (XSS) in file attachment field in MDaemon webmail 19.5.5 allows an attacker to execute code on the email recipient side while forwarding an email to… Affected: before 20.0.1 |
Showing 3