Tumbleweed

tumbleweed

5 CVEs • 5 products

Products (5)

Click to collapse

Toggle

Mailgate Email Firewall

mailgate_email_firewall

Messaging Management System

messaging_management_system

Securetransport Server App

securetransport_server_app

Securetransport Server

securetransport_server

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2008-1724 1Tumbleweed 1Securetransport Server App Apr 23, 2026 Apr 11, 2008 N/A· v4 N/A· v3 9.3 HIGH· v2 Stack-based buffer overflow in the IActiveXTransfer.FileTransfer method in the SecureTransport FileTransfer ActiveX control in vcst_en.dll 1.0.0.5 in Tumbleweed SecureTransport Server before 4.6.1 Hotfix 20 allows remote...Show more Stack-based buffer overflow in the IActiveXTransfer.FileTransfer method in the SecureTransport FileTransfer ActiveX control in vcst_en.dll 1.0.0.5 in Tumbleweed SecureTransport Server before 4.6.1 Hotfix 20 allows remote attackers to execute arbitrary code via a long remoteFile parameter.Show less
CVE-2006-4727 1Tumbleweed 1Email Firewall Apr 23, 2026 Dec 31, 2006 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in emfadmin/statusView.do in Tumbleweed EMF Administration Module 6.2.2 Build 4123, and possibly other versions before 6.3.2, allows remote attackers to inject arbitrary web scrip...Show more Cross-site scripting (XSS) vulnerability in emfadmin/statusView.do in Tumbleweed EMF Administration Module 6.2.2 Build 4123, and possibly other versions before 6.3.2, allows remote attackers to inject arbitrary web script or HTML via the (1) lineId and (2) sort parameters.Show less
CVE-2006-3901 1Tumbleweed 1Mailgate Email Firewall Apr 16, 2026 Jul 27, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple stack-based buffer overflows in Tumbleweed Email Firewall (EMF) allow remote attackers to execute arbitrary code via an email attachment with an LHA archive that contains a (1) file or (2) directory with a long...Show more Multiple stack-based buffer overflows in Tumbleweed Email Firewall (EMF) allow remote attackers to execute arbitrary code via an email attachment with an LHA archive that contains a (1) file or (2) directory with a long LHA extended header, (3) an LHA archive in which the "temporary pathname" field for decompressed output is greater than 2 bytes, or (4) an LHA archive with a long filename.Show less
CVE-2006-0487 1Tumbleweed 1Mailgate Email Firewall Apr 16, 2026 Feb 1, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Multiple unspecified vulnerabilities in Tumbleweed MailGate Email Firewall (EMF) 6.x allow remote attackers to (1) trigger temporarily incorrect processing of an e-mail message under "extremely heavy loads" and (2) cause...Show more Multiple unspecified vulnerabilities in Tumbleweed MailGate Email Firewall (EMF) 6.x allow remote attackers to (1) trigger temporarily incorrect processing of an e-mail message under "extremely heavy loads" and (2) cause an "increased number of missed spam" during "spam outbreaks."Show less
CVE-2000-0772 1Tumbleweed 1Messaging Management System Apr 16, 2026 Oct 20, 2000 N/A· v4 N/A· v3 7.5 HIGH· v2 The installation of Tumbleweed Messaging Management System (MMS) 4.6 and earlier (formerly Worldtalk Worldsecure) creates a default account "sa" with no password.