← Back

Phpmailer

phpmailer

Vendor: Phpmailer • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Phpmailer
1Phpmailer
Apr 23, 2026
Jun 14, 2007
N/A· v4
N/A· v3
6.8 MEDIUM· v2
PHPMailer 1.7, when configured to use sendmail, allows remote attackers to execute arbitrary shell commands via shell metacharacters in the SendmailSend function in class.phpmailer.php.
1Phpmailer
1Phpmailer
Apr 16, 2026
May 28, 2005
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The Data function in class.smtp.php in PHPMailer 1.7.2 and earlier allows remote attackers to cause a denial of service (infinite loop leading to memory and CPU consumption) via a long header field.