Gfi / Mailessentials
22 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-23621 | GFI MailEssentials AI < 22.4 ListServer.IsPathExist() Absolute Directory Traversal to File Enumeration | MEDIUM | 5.3 | Feb 19, 2026 |
| CVE-2026-23620 | GFI MailEssentials AI < 22.4 ListServer.IsDBExist() Absolute Directory Traversal to File Enumeration | MEDIUM | 5.3 | Feb 19, 2026 |
| CVE-2026-23619 | GFI MailEssentials AI < 22.4 General Settings Local Domains Domain Description Stored XSS | MEDIUM | 5.1 | Feb 19, 2026 |
| CVE-2026-23618 | GFI MailEssentials AI < 22.4 Anti-Spam Spam Keyword Checking Subject Condition Stored XSS | MEDIUM | 5.1 | Feb 19, 2026 |
| CVE-2026-23617 | GFI MailEssentials AI < 22.4 Anti-Spam Spam Keyword Checking Body Condition Stored XSS | MEDIUM | 5.1 | Feb 19, 2026 |
| CVE-2026-23616 | GFI MailEssentials AI < 22.4 Anti-Spam Anti-Spoofing Description Stored XSS | MEDIUM | 5.1 | Feb 19, 2026 |
| CVE-2026-23615 | GFI MailEssentials AI < 22.4 Anti-Spam Sender Policy Framework Email Exceptions Description Stored XSS | MEDIUM | 5.1 | Feb 19, 2026 |
| CVE-2026-23614 | GFI MailEssentials AI < 22.4 Anti-Spam Sender Policy Framework IP Exceptions Description Stored XSS | MEDIUM | 5.1 | Feb 19, 2026 |
| CVE-2026-23613 | GFI MailEssentials AI < 22.4 Anti-Spam URI DNS Blocklist Domain Stored XSS | MEDIUM | 5.1 | Feb 19, 2026 |
| CVE-2026-23612 | GFI MailEssentials AI < 22.4 Anti-Spam IP DNS Blocklist Domain Stored XSS | MEDIUM | 5.1 | Feb 19, 2026 |
| CVE-2026-23611 | GFI MailEssentials AI < 22.4 Anti-Spam IP Blocklist Description Stored XSS | MEDIUM | 5.1 | Feb 19, 2026 |
| CVE-2026-23610 | GFI MailEssentials AI < 22.4 POP2Exchange POP3 Server Login Stored XSS | MEDIUM | 5.1 | Feb 19, 2026 |
| CVE-2026-23609 | GFI MailEssentials AI < 22.4 General Settings Perimeter SMTP Servers Description Stored XSS | MEDIUM | 5.1 | Feb 19, 2026 |
| CVE-2026-23608 | GFI MailEssentials AI < 22.4 Email Management Mail Monitoring Rule Stored XSS | MEDIUM | 5.1 | Feb 19, 2026 |
| CVE-2026-23607 | GFI MailEssentials AI < 22.4 Anti-Spam Whitelist Description Stored XSS | MEDIUM | 5.1 | Feb 19, 2026 |
| CVE-2026-23606 | GFI MailEssentials AI < 22.4 Advanced Content Filtering Rule Stored XSS | MEDIUM | 5.1 | Feb 19, 2026 |
| CVE-2026-23605 | GFI MailEssentials AI < 22.4 Attachment Filtering Rule Stored XSS | MEDIUM | 5.1 | Feb 19, 2026 |
| CVE-2026-23604 | GFI MailEssentials AI < 22.4 Keyword Filtering Rule Stored XSS | MEDIUM | 5.1 | Feb 19, 2026 |
| CVE-2025-34491 | GFI MailEssentials < 21.8 MultiNode Insecure Deserialization | HIGH | 8.8 | Apr 28, 2025 |
| CVE-2025-34490 | GFI MailEssentials < 21.8 XXE Arbitrary File Read | MEDIUM | 6.5 | Apr 28, 2025 |
| CVE-2025-34489 | GFI MailEssentials < 21.8 Local Privilege Escalation | HIGH | 7.8 | Apr 28, 2025 |
| CVE-2004-1312 | A bug in the HTML parser in a certain Microsoft HTML library, as used in various third party products, may allow remote attackers to cause a denial of service… | HIGH | 10.0 | Jan 6, 2005 |
Showing 1 to 22 of 22 CVEs