Amax Information Technologies Magic Winmail Server — known CVE vulnerabilities

Every CVE whose affected-product data names Amax Information Technologies Magic Winmail Server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2003-0391 — CVSS 7.5 (high): Format string vulnerability in Magic WinMail Server 2.3, and possibly other 2.x versions, allows remote attackers to cause a denial of…
• CVE-2005-0313 — CVSS 7.5 (high): Multiple directory traversal vulnerabilities in Magic Winmail Server 4.0 Build 1112 allow remote attackers to (1) upload arbitrary files…
• CVE-2004-2572 — CVSS 5.0 (medium): AMAX Magic Winmail Server 3.6 allows remote attackers to obtain sensitive information by entering (1) invalid characters such as "()" or…
• CVE-2005-3811 — CVSS 5.0 (medium): Directory traversal vulnerability in admin/main.php in AMAX Magic Winmail Server 4.2 (build 0824) and earlier allows remote attackers to…
• CVE-2005-0315 — CVSS 4.6 (medium): The FTP service in Magic Winmail Server 4.0 Build 1112 does not verify that the IP address in a PORT command is the same as the IP address…
• CVE-2005-3692 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in AMAX Magic Winmail Server 4.2 (build 0824) and earlier allows remote attackers to inject…