Stalker Communigate Pro — known CVE vulnerabilities

Every CVE whose affected-product data names Stalker Communigate Pro, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2006-0468 — CVSS 7.5 (high): CommuniGate Pro Core Server before 5.0.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code…
• CVE-2003-1481 — CVSS 5.8 (medium): CommuniGate Pro 3.1 through 4.0.6 sends the session ID in the referer field for an HTTP request for an image, which allows remote attackers…
• CVE-2018-3815 — CVSS 5.7 (medium): The "XML Interface to Messaging, Scheduling, and Signaling" (XIMSS) protocol implementation in CommuniGate Pro (CGP) 6.2 suffers from a…
• CVE-2002-2375 — CVSS 5.0 (medium): Directory traversal vulnerability in CommuniGate Pro 4.0b4 and possibly earlier versions allows remote attackers to list the contents of…
• CVE-2000-1002 — CVSS 5.0 (medium): POP3 daemon in Stalker CommuniGate Pro 3.3.2 generates different error messages for invalid usernames versus invalid passwords, which…
• CVE-2005-1007 — CVSS 5.0 (medium): Unknown vulnerability in the LIST functionality in CommuniGate Pro before 4.3c3 allows remote attackers to cause a denial of service…
• CVE-2000-0634 — CVSS 5.0 (medium): The web administration interface for CommuniGate Pro 3.2.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot)…
• CVE-1999-0865 — CVSS 5.0 (medium): Buffer overflow in CommuniGatePro via a long string to the HTTP configuration port.
• CVE-2007-2718 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in the WebMail system in Stalker CommuniGate Pro 5.1.8 and earlier, when using Microsoft Internet…