← Back

Coremail

coremail

3 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Coremail Xt
coremail_xt
3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-14503
1Coremail
1Coremail Xt
Nov 21, 2024
Aug 10, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in intervalCheck.jsp in Coremail XT 3.0 allows remote attackers to inject arbitrary web script or HTML via the sid parameter.
CVE-2018-9330
1Coremail
1Coremail Xt
Jun 17, 2026
Apr 7, 2018
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
register.jsp in Coremail XT3.0 allows stored XSS, as demonstrated by the third form field to a URI under register/, a different vulnerability than CVE-2015-6942.
CVE-2015-6942
1Coremail
1Coremail Xt
May 13, 2026
Aug 29, 2017
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in Coremail XT3.0 allows remote attackers to inject arbitrary web script or HTML via a hyperlink in a document attachment.