Searching messaging software vulnerabilities

Netscape Messaging Server 3.54, 3.55, and 3.6 a

Messaging | Netscape | Server |

Netscape Messaging Server 3.54, 3.55, and 3.6 allows a remote attacker to cause a denial of service (memory exhaustion) via a series of long RCPT TO commands.


The installation of Tumbleweed Messaging Manage

installation | Management | Tumbleweed | Messaging | System |

The installation of Tumbleweed Messaging Management System (MMS) 4.6 and earlier (formerly Worldtalk Worldsecure) creates a default account "sa" with no password.


Cross-site scripting vulnerability in Horde Int

vulnerability | Cross-site | Messaging | scripting | Internet | Program | Horde |

Cross-site scripting vulnerability in Horde Internet Messaging Program (IMP) before 2.2.6 and 1.2.6 allows remote attackers to execute arbitrary Javascript embedded in an email.


Horde Internet Messaging Program (IMP) before 2

Messaging | Internet | Program | Horde |

Horde Internet Messaging Program (IMP) before 2.2.6 allows local users to read IMP configuration files and steal the Horde database password by placing the prefs.lang file containing PHP code on the server.


Web Messaging Server for Ipswitch IMail 7.04 an

Messaging | Ipswitch | Server | IMail | Web |

Web Messaging Server for Ipswitch IMail 7.04 and earlier allows remote authenticated users to change information for other users by modifying the olduser parameter in the "Change User Information" web form.


Vulnerability in VNC, TightVNC, and TridiaVNC a

Vulnerability | LocalSystem | Messaging | arbitrary | TridiaVNC | TightVNC | dialogue | clients" | execute | System | allows | access | bypass | users | local | using | Win32 | "Add | code | VNC | box | new | GUI |

Vulnerability in VNC, TightVNC, and TridiaVNC allows local users to execute arbitrary code as LocalSystem by using the Win32 Messaging System to bypass the VNC GUI and access the "Add new clients" dialogue box.


Flash Messaging 5.2.0g (rev 1.1.2) and earlier

Messaging | Flash | 520g |

Flash Messaging 5.2.0g (rev 1.1.2) and earlier allows remote attackers to cause a denial of service (application crash) via certain wide characters.


Stack-based buffer overflow in Ipswitch IMail E

Stack-based | Messaging | Ipswitch | overflow | Express | buffer | before | IMail | Web |

Stack-based buffer overflow in Ipswitch IMail Express Web Messaging before 8.05 might allow remote attackers to execute arbitrary code via an HTML message with long "tag text."


Multiple features in Ipswitch IMail Server befo

Ipswitch | features | Multiple | Server | before | IMail |

Multiple features in Ipswitch IMail Server before 8.13 allow remote attackers to cause a denial of service (crash) via (1) a long sender field to the Queue Manager or (2) a long To field to the Web Messaging component.


The person-to-person secure messaging feature i

person-to-person | messaging | Sticker | feature | before | secure |

The person-to-person secure messaging feature in Sticker before 3.1.0 beta 2 allows remote attackers to post messages to unauthorized private groups by using the group's public encryption key.


Mercur Messaging 2005 SP2 allows remote attacke

Messaging | Mercur |

Mercur Messaging 2005 SP2 allows remote attackers to read the source code of .ctml files via a URL with a trailing hex-encoded space ("%20").


Unknown vulnerability in Webmail in iPlanet Mes

vulnerability | Javascript | cross-site | attackers | arbitrary | scripting | Messaging | possibly | execute | Unknown | iPlanet | Webmail | Server | allows | remote | Patch | due | ONE | Sun |

Unknown vulnerability in Webmail in iPlanet Messaging Server 5.2 Patch 1 and Sun ONE Messaging Server 6.2 allows remote attackers to execute arbitrary Javascript, possibly due to a cross-site scripting (XSS) vulnerability.


POP3 service in Avaya Modular Messaging Message

Messaging | Message | Storage | Modular | service | Server | Avaya | POP3 |

POP3 service in Avaya Modular Messaging Message Storage Server (MSS) 2.0 SP 4 and earlier allows remote attackers to cause a denial of service (infinite loop) via crafted packets.


aMSN (aka Alvaro's Messenger) allows remote att

aMSN |

aMSN (aka Alvaro's Messenger) allows remote attackers to cause a denial of service (client hang and termination of client's instant-messaging session) by repeatedly sending crafted data to the default file-transfer port (TCP 6891).


Cross-site scripting (XSS) vulnerability in Web

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in Webmail in Sun Java System Messaging Server 6.0 through 6.2 and iPlanet Messaging Server 5.2 allows remote attackers to execute arbitrary Javascript via crafted messages.


The IMAP4 service in MERCUR Messaging 2005 befo

Messaging | service | MERCUR | IMAP4 |

The IMAP4 service in MERCUR Messaging 2005 before Service Pack 4 allows remote attackers to cause a denial of service (crash) via a message with a long subject field.


Unspecified vulnerability in MERCUR Messaging 2

vulnerability | Unspecified | Messaging | MERCUR |

Unspecified vulnerability in MERCUR Messaging 2005 before Service Pack 4 allows remote attackers to cause a denial of service (crash) via a TOP command to the POP3 service.


The SMTP service in MERCUR Messaging 2005 befor

Messaging | service | MERCUR | SMTP |

The SMTP service in MERCUR Messaging 2005 before Service Pack 4 allows remote attackers to cause a denial of service (infinite loop) via a message in which neither the originator nor recipient address is known.


Unspecified vulnerability in the Default Messag

vulnerability | Application | Unspecified | WebSphere | Component | Messaging | Default | Server | IBM |

Unspecified vulnerability in the Default Messaging Component in IBM WebSphere Application Server (WAS) 6.1.0.7 and earlier allows remote attackers to cause a denial of service related to a thread hang, and possibly related to a "TCP issue," or to MPAlarmThread and a resultant memory leak.


Unspecified vulnerability in the Default Messag

vulnerability | Application | Unspecified | WebSphere | Component | Messaging | Default | Server | IBM |

Unspecified vulnerability in the Default Messaging Component in IBM WebSphere Application Server (WAS) 6.1.0.7 and earlier has unknown impact and attack vectors, related to "incorrect authorization on a remote interface to the SDO repository."


Software vulnerabilities results 1 to 20 of 46     
Page: 123►