← Back

Webeasymail

webeasymail

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Webeasymail
webeasymail

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Webeasymail
1Webeasymail
Apr 16, 2026
Apr 11, 2003
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The POP3 service for WebEasyMail 3.4.2.2 and earlier generates diffferent error messages for valid and invalid usernames during authentication, which makes it easier for remote attackers to conduct brute force attacks.
1Webeasymail
1Webeasymail
Apr 16, 2026
Apr 11, 2003
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Format string vulnerability in SMTP service for WebEasyMail 3.4.2.2 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format strings in SMTP requests.