Vendor/product archive

sun / javamail CVEs

Beta · best-effort

4 CVEs tagged to sun / javamail — 0 Critical, 0 High, 4 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to sun vendor archive

CVE-2007-6059

Published Nov 20, 2007

Javamail does not properly handle a series of invalid login attempts in which the same e-mail address is entered as username and password, and the domain portion of this address y…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

CVE-2005-1753

Published Dec 31, 2005

ReadMessage.jsp in JavaMail API 1.1.3 through 1.3, as used by Apache Tomcat 5.0.16, allows remote attackers to view other users' e-mail attachments via a direct request to /mailbo…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

CVE-2005-1754

Published Dec 31, 2005

JavaMail API 1.1.3 through 1.3, as used by Apache Tomcat 5.0.16, allows remote attackers to read arbitrary files via a full pathname in the argument to the Download parameter. NO…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

CVE-2005-1105

Published May 2, 2005

Directory traversal vulnerability in the MimeBodyPart.getFileName method in JavaMail 1.3.2 allows remote attackers to write arbitrary files via a .. (dot dot) in the filename in t…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1