Login Request a demo
SM
Vendor
Smartertools
4 products with CVEs on record
55
CVEs
3
On KEV
3
New 30D
Products
SM
Smartermail
Smartertools
10.0
30 CVEs3 on KEV3 new
SM
Smarterstats
Smartertools
6.1
17 CVEs0 on KEV0 new
SM
Smartertrack
Smartertools
7.2
7 CVEs0 on KEV0 new
SE
Smartermail Enterprise
Smartertools
–
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-104084
SM
Smartermail
Smartertools
8.8
0%
Oct 9SmarterMail < Build 9777 Stale JWT Role Claim Privilege Escalation via Refresh Token
CVE-2026-104083
SM
Smartermail
Smartertools
6.1
0%
Oct 9SmarterMail < Build 9777 Stored Mutation XSS via MathML Foreign Content
CVE-2026-104082
SM
Smartermail
Smartertools
7.2
1%
Oct 9SmarterMail < Build 9777 SysAdmin Remote Code Execution via Volume Mount
CVE-2026-7807
SM
Smartermail
Smartertools
8.8
0%
May 8SmarterTools SmarterMail < Build 9560 Server Local File Inclusion via the /api/v1/report/summary/{type} API
CVE-2026-40514
SM
Smartermail
Smartertools
9.1
0%
Apr 27SmarterTools SmarterMail < Build 9610 Cryptographic Weakness via Weak RNG
CVE-2026-25067
SM
Smartermail
Smartertools
5.3
0%
Jan 29SmarterTools SmarterMail versions prior to build 9518 contain an unauthenticated path coercion vulnerability in the background-of-the-day preview endpoint
CVE-2026-24423
RansomwareIn wildKEV
SM
SmarterMail
SmarterTools
9.8
88%
Jan 23SmarterTools SmarterMail < Build 9511 Unauthenticated RCE via ConnectToHub API
CVE-2026-23760
RansomwareIn wildKEV
SM
SmarterMail
SmarterTools
9.8
96%
Jan 22SmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset API
CVE-2020-36926
SM
Smartertrack
Smartertools
5.3
1%
Jan 16SmarterTrack 7922 contains an information disclosure vulnerability in the Chat Management search form that reveals agent identification details
CVE-2025-52691
RansomwareIn wildKEV
SM
SmarterMail
SmarterTools
10.0
86%
Dec 29Upload Arbitrary Files
CVE-2023-48116
SM
Smartermail
Smartertools
5.4
0%
Dec 21SmarterTools SmarterMail 8495 through 8664 before 8747 allows stored XSS via a crafted description of a Calendar appointment
CVE-2023-48115
SM
Smartermail
Smartertools
5.4
0%
Dec 21SmarterTools SmarterMail 8495 through 8664 before 8747 allows stored DOM XSS because an XSS protection mechanism is skipped when messageHTML and messagePlainText are set in the…
CVE-2023-48114
SM
Smartermail
Smartertools
5.4
0%
Dec 21SmarterTools SmarterMail 8495 through 8664 before 8747 allows stored XSS by using image/svg+xml and an uploaded SVG document
CVE-2022-24387
SM
Smartertrack
Smartertools
7.2
2%
Mar 14With administrator or admin privileges the application can be tricked into overwriting files in app_data/Config folder, e.g
CVE-2022-24386
SM
Smartertrack
Smartertools
6.1
1%
Mar 14Stored XSS in SmarterTools SmarterTrack This issue affects: SmarterTools SmarterTrack 100.0.8019.14010
CVE-2022-24385
SM
Smartertrack
Smartertools
6.5
1%
Mar 14A Direct Object Access vulnerability in SmarterTools SmarterTrack leads to information disclosure This issue affects: SmarterTools SmarterTrack 100.0.8019.14010
CVE-2022-24384
SM
Smartertrack
Smartertools
6.1
4%
Mar 14Cross-site Scripting (XSS) vulnerability in SmarterTools SmarterTrack This issue affects: SmarterTools SmarterTrack 100.0.8019.14010
CVE-2021-43977
SM
Smartermail
Smartertools
6.1
1%
Nov 17SmarterTools SmarterMail 16.x through 100.x before 100.0.7803 allows XSS
CVE-2021-32234
SM
Smartermail
Smartertools
9.8
2%
Nov 17SmarterTools SmarterMail 16.x through 100.x before 100.0.7803 allows remote code execution
CVE-2021-40377
SM
Smartermail
Smartertools
5.4
0%
Sep 8SmarterTools SmarterMail 16.x before build 7866 has stored XSS
CVE-2020-29548
SM
Smartermail
Smartertools
8.1
1%
Aug 17An issue was discovered in SmarterTools SmarterMail through 100.0.7537
CVE-2021-32233
SM
Smartermail
Smartertools
6.1
1%
Jul 6SmarterTools SmarterMail before Build 7776 allows XSS
CVE-2019-7214
SM
Smartermail
Smartertools
9.8
85%
Apr 24SmarterTools SmarterMail 16.x before build 6985 allows deserialization of untrusted data
CVE-2019-7213
SM
Smartermail
Smartertools
6.5
42%
Apr 24SmarterTools SmarterMail 16.x before build 6985 allows directory traversal
CVE-2019-7212
SM
Smartermail
Smartertools
8.2
1%
Apr 24SmarterTools SmarterMail 16.x before build 6985 has hardcoded secret keys
CVE-2019-7211
SM
Smartermail
Smartertools
6.1
1%
Apr 24SmarterTools SmarterMail 16.x before build 6995 has stored XSS
CVE-2015-9276
SM
Smartermail
Smartertools
6.1
1%
Jan 16SmarterTools SmarterMail before 13.3.5535 was vulnerable to stored XSS by bypassing the anti-XSS mechanisms
CVE-2017-14620
SM
Smarterstats
Smartertools
6.1
2%
Sep 30SmarterStats Version 11.3.6347 will Render the Referer Field of HTTP Logfiles from URL /Data/Reports/ReferringURLsWithQueries resulting in Stored Cross Site Scripting
CVE-2012-2578
SM
Smartermail
Smartertools
–
2%
Sep 19Multiple cross-site scripting (XSS) vulnerabilities in SmarterMail 9.2 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) a…
CVE-2011-4752
SM
Smarterstats
Smartertools
–
2%
Dec 16SmarterTools SmarterStats 6.2.4100 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an…
CVE-2011-4751
SM
Smarterstats
Smartertools
–
1%
Dec 16SmarterTools SmarterStats 6.2.4100 generates web pages containing external links in response to GET requests with query strings for frmGettingStarted.aspx, which makes it easier…
CVE-2011-4750
SM
Smarterstats
Smartertools
–
1%
Dec 16Multiple cross-site scripting (XSS) vulnerabilities in SmarterTools SmarterStats 6.2.4100 allow remote attackers to inject arbitrary web script or HTML via crafted input to a PHP…
CVE-2011-2159
SM
Smarterstats
Smartertools
–
4%
May 20The SmarterTools SmarterStats 6.0 web server omits the Content-Type header for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an…
CVE-2011-2158
SM
Smarterstats
Smartertools
–
4%
May 20The SmarterTools SmarterStats 6.0 web server sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by…
CVE-2011-2157
SM
Smarterstats
Smartertools
–
3%
May 20The (1) Admin/frmEmailReportSettings.aspx and (2) Admin/frmGeneralSettings.aspx components in the SmarterTools SmarterStats 6.0 web server generate web pages containing e-mail…
CVE-2011-2156
SM
Smarterstats
Smartertools
–
3%
May 20The SmarterTools SmarterStats 6.0 web server allows remote attackers to obtain directory listings via a direct request for the (1) Admin/, (2) Admin/Defaults/, (3)…
CVE-2011-2155
SM
Smarterstats
Smartertools
–
4%
May 20Login.aspx in the SmarterTools SmarterStats 6.0 web server generates a ctl00$MPH$txtPassword password form field without disabling the autocomplete feature, which makes it easier…
CVE-2011-2154
SM
Smarterstats
Smartertools
–
3%
May 20login.aspx in the SmarterTools SmarterStats 6.0 web server does not include the HTTPOnly flag in a Set-Cookie header for the loginsettings cookie, which makes it easier for remote…
CVE-2011-2153
SM
Smarterstats
Smartertools
–
2%
May 20Login.aspx in the SmarterTools SmarterStats 6.0 web server supports URLs containing txtUser and txtPass parameters in the query string, which makes it easier for context-dependent…
CVE-2011-2152
SM
Smarterstats
Smartertools
–
3%
May 20The SmarterTools SmarterStats 6.0 web server generates web pages containing external links in response to GET requests with query strings for (1) Client/frmViewReports.aspx or (2)…
CVE-2011-2151
SM
Smarterstats
Smartertools
–
3%
May 20The (1) Admin/frmEmailReportSettings.aspx, (2) Admin/frmGeneralSettings.aspx, (3) Admin/frmSite.aspx, (4) Client/frmUser.aspx, and (5) Login.aspx components in the SmarterTools…
CVE-2011-2150
SM
Smarterstats
Smartertools
–
3%
May 20The SmarterTools SmarterStats 6.0 web server does not properly validate string data that is intended for storage in an XML document, which allows remote attackers to cause a…
CVE-2011-2149
SM
Smarterstats
Smartertools
–
2%
May 20Multiple SQL injection vulnerabilities in the SmarterTools SmarterStats 6.0 web server allow remote attackers to execute arbitrary SQL commands via certain parameters to (1)…
CVE-2011-2148
SM
Smarterstats
Smartertools
–
5%
May 20Admin/frmSite.aspx in the SmarterTools SmarterStats 6.0 web server allows remote attackers to execute arbitrary commands via vectors involving a leading and trailing & (ampersand)…
CVE-2010-3486
SM
Smartermail
Smartertools
–
3%
Sep 22Directory traversal vulnerability in FileStorageUpload.ashx in SmarterMail 7.1.3876 allows remote attackers to read arbitrary files via a (1) ../ (dot dot slash), (2) %5C (encoded…
CVE-2010-3425
SM
Smarterstats
Smartertools
–
1%
Sep 16Cross-site scripting (XSS) vulnerability in UserControls/Popups/frmHelp.aspx in SmarterStats 5.3, 5.3.3819, and possibly other 5.3 versions, allows remote attackers to inject…
CVE-2009-4995
SM
Smartertrack
Smartertools
–
1%
Aug 25Cross-site scripting (XSS) vulnerability in frmTickets.aspx in SmarterTools SmarterTrack before 4.0.3504 allows remote attackers to inject arbitrary web script or HTML via the…
CVE-2009-4994
SM
Smartertrack
Smartertools
–
1%
Aug 25Cross-site scripting (XSS) vulnerability in frmKBSearch.aspx in SmarterTools SmarterTrack before 4.0.3504 allows remote attackers to inject arbitrary web script or HTML via the…
CVE-2008-1854
SM
Smartermail
Smartertools
–
3%
Apr 16Unspecified vulnerability in SmarterMail Web Server (SMWebSvr.exe) in SmarterMail 5.0.2999 allows remote attackers to cause a denial of service (service termination) via a long…
CVE-2008-0872
SE
Smartermail Enterprise
Smartertools
–
2%
Feb 21Cross-site scripting (XSS) vulnerability in SmarterTools SmarterMail Enterprise 4.3 allows remote attackers to inject arbitrary web script or HTML via a STYLE attribute of an…
CVE-2004-2587
SM
Smartermail
Smartertools
–
2%
Dec 31login.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to cause a denial of service via a long txtusername parameter, possibly due to a buffer…
CVE-2004-2586
SM
Smartermail
Smartertools
–
2%
Dec 31Directory traversal vulnerability in frmGetAttachment.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to read arbitrary files via the filename…
CVE-2004-2585
SM
Smartermail
Smartertools
–
1%
Dec 31Cross-site scripting (XSS) vulnerability in frmCompose.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to inject arbitrary web script or HTML via…
CVE-2004-2584
SM
Smartermail
Smartertools
–
1%
Dec 31frmAddfolder.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote authenticated users to create a folder that SmarterMail cannot delete or rename via a folder name…
CVE-2004-2583
SM
Smartermail
Smartertools
–
2%
Dec 31SMTP service in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to cause a denial of service (CPU consumption) via a large number of simultaneous open…