SM
Vendor
Smoothwall
6 products with CVEs on record
32
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-27508
EX
Express
Smoothwall
6.1
0%
Mar 30Smoothwall Express < 3.1 Update 13 Reflected XSS in redirect.cgi via url Parameter
CVE-2026-26352
EX
Express
Smoothwall
5.4
0%
Mar 30Smoothwall Express < 3.1 Update 13 Stored XSS in vpnmain.cgi via VPN_IP Parameter
CVE-2019-25395
SE
Smoothwall Express
Smoothwall
6.1
0%
Feb 16Smoothwall Express 3.1 'preferences.cgi' Cross-Site Scripting
CVE-2019-25394
SE
Smoothwall Express
Smoothwall
6.1
0%
Feb 16Smoothwall Express 3.1 'modem.cgi' Cross-Site Scripting
CVE-2019-25393
SE
Smoothwall Express
Smoothwall
6.1
0%
Feb 16Smoothwall Express 3.1 'smoothinfo.cgi' Cross-Site Scripting
CVE-2019-25392
SE
Smoothwall Express
Smoothwall
6.1
0%
Feb 16Smoothwall Express 3.1 'iptools.cgi' Cross-Site Scripting
CVE-2019-25390
SE
Smoothwall Express
Smoothwall
6.1
0%
Feb 16Smoothwall Express 3.1 'interfaces.cgi' Cross-Site Scripting
CVE-2019-25389
SE
Smoothwall Express
Smoothwall
6.1
0%
Feb 16Smoothwall Express 3.1 'timedaccess.cgi' Cross-Site Scripting
CVE-2019-25388
SE
Smoothwall Express
Smoothwall
6.1
0%
Feb 16Smoothwall Express 3.1 'ipblock.cgi' Cross-Site Scripting
CVE-2019-25387
SE
Smoothwall Express
Smoothwall
6.1
0%
Feb 16Smoothwall Express 3.1 'xtaccess.cgi' Cross-Site Scripting
CVE-2019-25386
SE
Smoothwall Express
Smoothwall
6.1
0%
Feb 16Smoothwall Express 3.1 'dmzholes.cgi' Cross-Site Scripting
CVE-2019-25385
SE
Smoothwall Express
Smoothwall
6.1
0%
Feb 16Smoothwall Express 3.1 'outgoing.cgi' Cross-Site Scripting
CVE-2019-25384
SE
Smoothwall Express
Smoothwall
6.1
0%
Feb 16Smoothwall Express 3.1 'portfw.cgi' Cross-Site Scripting
CVE-2019-25383
SE
Smoothwall Express
Smoothwall
6.1
0%
Feb 16Smoothwall Express 3.1 'apcupsd.cgi' Cross-Site Scripting
CVE-2019-25382
SE
Smoothwall Express
Smoothwall
6.1
0%
Feb 16Smoothwall Express 3.1 'time.cgi' Cross-Site Scripting
CVE-2019-25381
SE
Smoothwall Express
Smoothwall
6.1
0%
Feb 16Smoothwall Express 3.1 'hosts.cgi' Cross-Site Scripting
CVE-2019-25380
SE
Smoothwall Express
Smoothwall
6.1
0%
Feb 16Smoothwall Express 3.1 'dhcp.cgi' Cross-Site Scripting
CVE-2019-25379
SE
Smoothwall Express
Smoothwall
7.2
0%
Feb 16Smoothwall Express 3.1 'urlfilter.cgi' Cross-Site Scripting
CVE-2019-25378
SE
Smoothwall Express
Smoothwall
6.1
0%
Feb 16Smoothwall Express 3.1 'proxy.cgi' Cross-Site Scripting
CVE-2011-1085
SE
Smoothwall Express
Smoothwall
8.8
0%
Feb 7CSRF vulnerability in Smoothwall Express 3
CVE-2011-1084
SE
Smoothwall Express
Smoothwall
6.1
1%
Feb 7A cross-site scripting (XSS) vulnerability in Smoothwall Express 3
CVE-2014-9431
SM
Smoothwall
Smoothwall
–
1%
Dec 31Multiple cross-site request forgery (CSRF) vulnerabilities in Smoothwall Express 3.1 and 3.0 SP3 allow remote attackers to hijack the authentication of administrators for requests…
CVE-2014-9430
SM
Smoothwall
Smoothwall
–
1%
Dec 31Cross-site scripting (XSS) vulnerability in httpd/cgi-bin/vpn.cgi/vpnconfig.dat in Smoothwall Express 3.0 SP3 allows remote attackers to inject arbitrary web script or HTML via…
CVE-2014-9429
SM
Smoothwall
Smoothwall
–
1%
Dec 31Multiple cross-site scripting (XSS) vulnerabilities in Smoothwall Express 3.1 and 3.0 SP3 allow remote attackers to inject arbitrary web script or HTML via the (1) PROFILENAME…
CVE-2011-5284
SM
Smoothwall
Smoothwall
–
2%
Dec 31Cross-site request forgery (CSRF) vulnerability in the web management interface in httpd/cgi-bin/shutdown.cgi in Smoothwall Express 3.1 and 3.0 SP3 and earlier allows remote…
CVE-2011-5283
SM
Smoothwall
Smoothwall
–
3%
Dec 31Cross-site scripting (XSS) vulnerability in the web management interface in httpd/cgi-bin/ipinfo.cgi in Smoothwall Express 3.1 and 3.0 SP3 and earlier allows remote attackers to…
CVE-2009-0803
NE
Networkguardian
Smoothwall
–
2%
Mar 4SmoothWall SmoothGuardian, as used in SmoothWall Firewall, NetworkGuardian, and SchoolGuardian 2008, when transparent interception mode is enabled, uses the HTTP Host header to…
CVE-2003-0209
SM
Smoothwall
Smoothwall
–
39%
May 5Integer overflow in the TCP stream reassembly module (stream4) for Snort 2.0 and earlier allows remote attackers to execute arbitrary code via large sequence numbers in packets,…