← Back

Mailwise

mailwise

Vendor: Cybozu • 14 CVEs

CVEs (14)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-5572
1Cybozu
1Mailwise
Jun 17, 2026
May 29, 2020
N/A· v4
4.6 MEDIUM· v3
2.1 LOW· v2
Android App 'Mailwise for Android' 1.0.0 to 1.0.1 allows an attacker to obtain credential information registered in the product via unspecified vectors.
CVE-2018-0702
1Cybozu
1Mailwise
Nov 21, 2024
Jan 9, 2019
N/A· v4
7.5 HIGH· v3
6.4 MEDIUM· v2
Directory traversal vulnerability in Cybozu Mailwise 5.0.0 to 5.4.5 allows remote attackers to delete arbitrary files via unspecified vectors.
CVE-2018-0559
1Cybozu
1Mailwise
Nov 21, 2024
Jun 26, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'Address' via unspecified vectors.
CVE-2018-0558
1Cybozu
1Mailwise
Nov 21, 2024
Jun 26, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Reflected cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML in 'System settings' via unspecified vectors.
CVE-2018-0557
1Cybozu
1Mailwise
Nov 21, 2024
Jun 26, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Stored cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'E-mail Details Screen' via unspecified vectors.
CVE-2016-4841
1Cybozu
1Mailwise
May 13, 2026
Apr 21, 2017
N/A· v4
4.3 MEDIUM· v3
4.3 MEDIUM· v2
Cybozu Mailwise before 5.4.0 allows remote attackers to inject arbitrary email headers.
CVE-2016-4844
1Cybozu
1Mailwise
May 13, 2026
Apr 20, 2017
N/A· v4
4.3 MEDIUM· v3
4.3 MEDIUM· v2
Cybozu Mailwise before 5.4.0 allows remote attackers to conduct clickjacking attacks.
CVE-2016-4843
1Cybozu
1Mailwise
May 13, 2026
Apr 20, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Cybozu Mailwise before 5.4.0 allows remote attackers to obtain sensitive cookie information.
CVE-2016-4842
1Cybozu
1Mailwise
May 13, 2026
Apr 20, 2017
N/A· v4
4.3 MEDIUM· v3
4.3 MEDIUM· v2
Cybozu Mailwise before 5.4.0 allows remote attackers to obtain information on when an email is read.
CVE-2014-5314
1Cybozu
3Dezie
MailwiseOffice
May 6, 2026
Nov 24, 2014
N/A· v4
N/A· v3
9.0 HIGH· v2
Buffer overflow in Cybozu Office 9 and 10 before 10.1.0, Mailwise 4 and 5 before 5.1.4, and Dezie 8 before 8.1.1 allows remote authenticated users to execute arbitrary code via e-mail messages.
CVE-2013-4698
1Cybozu
1Mailwise
Apr 29, 2026
Aug 16, 2013
N/A· v4
N/A· v3
3.5 LOW· v2
Cybozu Mailwise 5.0.4 and 5.0.5 allows remote authenticated users to obtain sensitive e-mail content intended for different persons in opportunistic circumstances by reading Subject header lines within the user's own mai...Show more
Cybozu Mailwise 5.0.4 and 5.0.5 allows remote authenticated users to obtain sensitive e-mail content intended for different persons in opportunistic circumstances by reading Subject header lines within the user's own mailbox.Show less
CVE-2013-2305
1Cybozu
3Cybozu Dezie
Cybozu OfficeMailwise
Apr 29, 2026
Apr 25, 2013
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Cross-site request forgery (CSRF) vulnerability in Cybozu Office before 8.1.6 and 9.x before 9.3.0, Cybozu Dezie before 8.0.7, and Cybozu Mailwise before 5.0.4 allows remote attackers to hijack the authentication of arbi...Show more
Cross-site request forgery (CSRF) vulnerability in Cybozu Office before 8.1.6 and 9.x before 9.3.0, Cybozu Dezie before 8.0.7, and Cybozu Mailwise before 5.0.4 allows remote attackers to hijack the authentication of arbitrary users for requests that change passwords.Show less
CVE-2011-1334
1Cybozu
5Collaborex
DezieGaroon+2 more
Apr 29, 2026
Jun 29, 2011
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through 2.1.3, Cybozu Dezie before 6.1, Cybozu MailWise before 3.1, and Cybozu Collaborex before 1.5 allows remote attackers to inject arbi...Show more
Cross-site scripting (XSS) vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through 2.1.3, Cybozu Dezie before 6.1, Cybozu MailWise before 3.1, and Cybozu Collaborex before 1.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to "downloading graphic files from the mail system."Show less
CVE-2006-4491
1Cybozu
5Collaborex
Cybozu AgCybozu Pocket+2 more
Apr 16, 2026
Aug 31, 2006
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Directory traversal vulnerability in Cybozu Collaborex, AG before 1.2(1.5), AG Pocket before 5.2(0.8), Mailwise before 3.0(0.3), and Garoon 1 before 1.5(4.1) allows remote authenticated users to read arbitrary files via...Show more
Directory traversal vulnerability in Cybozu Collaborex, AG before 1.2(1.5), AG Pocket before 5.2(0.8), Mailwise before 3.0(0.3), and Garoon 1 before 1.5(4.1) allows remote authenticated users to read arbitrary files via unspecified vectors.Show less