← Back

Phlymail

phlymail

Vendor: Phlymail • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Phlymail
1Phlymail
Apr 16, 2026
Dec 31, 2005
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in PHlyMail before 3.3 Beta1 allows remote attackers to inject arbitrary Javascript via unknown attack vectors.
1Phlymail
1Phlymail
Apr 16, 2026
Dec 31, 2005
N/A· v4
N/A· v3
6.4 MEDIUM· v2
SQL injection vulnerability in PHlyMail 3.02.01 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors.
1Phlymail
1Phlymail
Apr 16, 2026
Aug 17, 2005
N/A· v4
N/A· v3
7.5 HIGH· v2
Unknown vulnerability in the "frontend authentication" in PHlyMail 3.02.00 has unknown impact and attack vectors.