Altn Mdaemon Webmail — known CVE vulnerabilities

Every CVE whose affected-product data names Altn Mdaemon Webmail, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2018-17792 — CVSS 8.8 (high): MDaemon Webmail (formerly WorldClient) has CSRF.
• CVE-2020-18723 — CVSS 5.4 (medium): Stored cross-site scripting (XSS) in file attachment field in MDaemon webmail 19.5.5 allows an attacker to execute code on the email…
• CVE-2020-18724 — CVSS 5.4 (medium): Authenticated stored cross-site scripting (XSS) in the contact name field in the distribution list of MDaemon webmail 19.5.5 allows an…