MailEnable

Products

ProductCVEsExploitedLatest
MailEnable30–Nov 3, 2026
MailEnable Enterprise Premium1–May 8, 2026

Exploited and recent CVEs

  • CVE-2026-114552 Medium 6.5 MailEnable parseObjectResponse XML External Entity Processing Information Disclosure Vulnerability 0.5%
  • CVE-2026-114551 Medium 5.9 MailEnable Auth Cleartext Storage Information Disclosure Vulnerability 0.3%
  • CVE-2026-44400 High 8.1 MailEnable Enterprise Premium < 10.55 Authorization Bypass via WebAdmin 0.4%
  • CVE-2026-32852 Medium 5.1 MailEnable < 10.55 Reflected XSS via FreeBusy.aspx StartDate Parameter 0.3%
  • CVE-2026-32851 Medium 5.1 MailEnable < 10.55 Reflected XSS via FreeBusy.aspx StartDate Parameter 0.3%
  • CVE-2026-32850 Medium 5.1 MailEnable < 10.55 Reflected XSS via ManageShares.aspx SelectedIndex Parameter 0.3%
  • CVE-2025-34427 High 8.4 MailEnable < 10.54 Cleartext Credential Storage in AUTH.TAB 0.1%
  • CVE-2025-34428 High 8.4 MailEnable < 10.54 Cleartext Credential Storage in AUTH.SAV 0.1%
  • CVE-2025-34421 High 8.5 MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAISP.DLL 0.2%
  • CVE-2025-34417 High 8.5 MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAISO.DLL 0.2%
  • CVE-2025-34419 High 8.5 MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAISM.DLL 0.2%
  • CVE-2025-34416 High 8.5 MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIPO.DLL 0.2%
  • CVE-2025-34422 High 8.5 MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIPC.DLL 0.2%
  • CVE-2025-34418 High 8.5 MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIMF.DLL 0.2%
  • CVE-2025-34424 High 8.5 MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIDP.DLL 0.2%
  • CVE-2025-34423 High 8.5 MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIAU.DLL 0.2%
  • CVE-2025-34420 High 8.5 MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIAM.DLL 0.2%
  • CVE-2025-34425 Medium 5.3 MailEnable < 10.54 Reflected XSS in WindowContext Parameter of MAI/compose.aspx 0.4%
  • CVE-2025-34396 High 8.5 MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAINFY.DLL 0.2%
  • CVE-2025-34408 Medium 5.3 MailEnable < 10.54 Reflected XSS in Added Parameter of MAI/AddRecipientsResult.aspx 0.5%
  • CVE-2025-34398 Medium 5.3 MailEnable < 10.54 Reflected XSS in AddressesBcc Parameter of AddressBook.aspx 0.4%
  • CVE-2025-34399 Medium 5.3 MailEnable < 10.54 Reflected XSS in AddressesCc Parameter of AddressBook.aspx 0.4%
  • CVE-2025-34400 Medium 5.3 MailEnable < 10.54 Reflected XSS in AddressesTo Parameter of AddressBook.aspx 0.4%
  • CVE-2025-34409 Medium 5.3 MailEnable < 10.54 Reflected XSS in Failed Parameter of MAI/AddRecipientsResult.aspx 0.5%
  • CVE-2025-34401 Medium 5.3 MailEnable < 10.54 Reflected XSS in FieldBcc Parameter of AddressBook.aspx 0.4%
  • CVE-2025-34402 Medium 5.3 MailEnable < 10.54 Reflected XSS in FieldCc Parameter of AddressBook.aspx 0.4%
  • CVE-2025-34403 Medium 5.3 MailEnable < 10.54 Reflected XSS in FieldTo Parameter of AddressBook.aspx 0.4%
  • CVE-2025-34406 Medium 5.3 MailEnable < 10.54 Reflected XSS in Id Parameter of Mobile/ContactDetails.aspx 0.4%
  • CVE-2025-34404 Medium 5.3 MailEnable < 10.54 Reflected XSS in InstanceScope Parameter of CAL/compose.aspx 0.4%
  • CVE-2025-34397 Medium 5.3 MailEnable < 10.54 Reflected XSS in Message Parameter of Mobile/Compose.aspx 0.4%