CVE-2006-6964

Published: Jan 29, 2007Modified: Apr 23, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

MailEnable Professional before 1.78 provides a cleartext user password when an administrator edits the user's settings, which allows remote authenticated administrators to obtain sensitive information by viewing the HTML source.

Affected (8)

Products: Mailenable: Mailenable Professional

Mailenable

1 product

Mailenable Professional

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Mailenable Mailenable Professional	Version 1.71
Mailenable Mailenable Professional	Version 1.72
Mailenable Mailenable Professional	Version 1.73
Mailenable Mailenable Professional	Version 1.74
Mailenable Mailenable Professional	Version 1.75
Mailenable Mailenable Professional	Version 1.76
Mailenable Mailenable Professional	Version 1.77
Mailenable Mailenable Professional	Version 1.7