Lyris Technologies Inc Listmanager — known CVE vulnerabilities

Every CVE whose affected-product data names Lyris Technologies Inc Listmanager, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2005-4142 — CVSS 7.5 (high): The web interface for subscribing new users in Lyris ListManager 5.0 through 8.8b, in combination with a line wrap feature, allows remote…
• CVE-2005-4145 — CVSS 6.5 (medium): The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database to use a password with a small search…
• CVE-2005-4147 — CVSS 6.5 (medium): The TCLHTTPd service in Lyris ListManager before 8.9b allows remote attackers to obtain source code for arbitrary .tml (TCL) files via (1)…
• CVE-2005-4146 — CVSS 5.0 (medium): Lyris ListManager before 8.9b allows remote attackers to obtain sensitive information via a request to the TCLHTTPd status module, which…
• CVE-2005-4148 — CVSS 5.0 (medium): Lyris ListManager 8.5, and possibly other versions before 8.8, includes sensitive information in the env hidden variable, which allows…
• CVE-2005-4149 — CVSS 5.0 (medium): Lyris ListManager 8.8 through 8.9b allows remote attackers to obtain sensitive information by causing errors in TML scripts, such as via…