Hmailserver

hmailserver

Vendor: Hmailserver • 5 CVEs

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-52374 1Hmailserver 1Hmailserver Jun 17, 2026 Jul 21, 2025 N/A· v4 4.6 MEDIUM· v3 N/A· v2 Use of hardcoded cryptographic key in Encryption.cs in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords to other servers from hMailAdmin.exe.config file to access other hMailServer admin consoles wit...Show more Use of hardcoded cryptographic key in Encryption.cs in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords to other servers from hMailAdmin.exe.config file to access other hMailServer admin consoles with configured connections.Show less
CVE-2025-52373 1Hmailserver 1Hmailserver Jun 17, 2026 Jul 21, 2025 N/A· v4 4.6 MEDIUM· v3 N/A· v2 Use of hardcoded cryptographic key in BlowFish.cpp in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords used in database connections from hMailServer.ini config file.
CVE-2025-52372 1Hmailserver 1Hmailserver Jun 17, 2026 Jul 21, 2025 N/A· v4 5.1 MEDIUM· v3 N/A· v2 An issue in hMailServer v.5.8.6 allows a local attacker to obtain sensitive information via the hmailserver/installation/hMailServerInnoExtension.iss and hMailServer.ini components.
CVE-2013-5571 1Hmailserver 1Hmailserver Nov 21, 2024 Jan 7, 2020 N/A· v4 5.9 MEDIUM· v3 2.6 LOW· v2 HMailServer 5.3.x and prior: Memory Corruption which could cause DOS
CVE-2008-3676 1Hmailserver 1Hmailserver Apr 23, 2026 Aug 14, 2008 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Unspecified vulnerability in the IMAP server in hMailServer 4.4.1 allows remote authenticated users to cause a denial of service (resource exhaustion or daemon crash) via a long series of IMAP commands.