Mercur Mercur Messaging — known CVE vulnerabilities

Every CVE whose affected-product data names Mercur Mercur Messaging, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2006-1255 — CVSS 10.0 (critical): Stack-based buffer overflow in the IMAP service in Mercur Messaging 5.0 SP3 and earlier allows remote attackers to cause a denial of…
• CVE-2005-1657 — CVSS 7.5 (high): Multiple directory traversal vulnerabilities in Mercur Messaging 2005 SP2 allow remote attackers to perform unauthorized file operations…
• CVE-2005-1656 — CVSS 5.0 (medium): Mercur Messaging 2005 SP2 allows remote attackers to read the source code of .ctml files via a URL with a trailing hex-encoded space…