CVE-2025-68723

>= 10.3.0 and < 10.5.57

Axigen Mail Server before 10.5.57 contains multiple stored Cross-Site Scripting (XSS) vulnerabilities in the WebAdmin interface. T

9.0CRITICAL

CVE-2025-68643

>= 10.3.0 and < 10.5.57

Axigen Mail Server before 10.5.57 allows stored Cross-Site Scripting (XSS) in the handling of the timeFormat account preference pa

5.4MEDIUM

CVE-2025-68722

>= 10.3.0 and < 10.5.57

Axigen Mail Server before 10.5.57 and 10.6.x before 10.6.26 contains a Cross-Site Request Forgery (CSRF) vulnerability in the WebA

8.8HIGH

CVE-2025-68721

>= 10.3.0 and < 10.5.57

Axigen Mail Server before 10.5.57 contains an improper access control vulnerability in the WebAdmin interface. A delegated admin a

8.1HIGH

CVE-2020-26942

>= 10.3.0 and < 10.3.1.27

An issue discovered in Axigen Mail Server 10.3.x before 10.3.1.27 and 10.3.2.x before 10.3.3.1 allows unauthenticated attackers to

9.1CRITICAL

CVE-2023-48974

<= 10.5.7

Cross Site Scripting vulnerability in Axigen WebMail prior to 10.3.3.61 allows a remote attacker to escalate privileges via a craf

9.6CRITICAL

CVE-2023-23566

all versions

A 2-Step Verification problem in Axigen 10.3.3.52 allows an attacker to access a mailbox by bypassing 2-Step Verification when the

9.8CRITICAL

CVE-2015-5379

all versions

Cross-site scripting (XSS) vulnerability in actions.hsp in the Ajax WebMail interface in AXIGEN Mail Server before 9.0 allows remo

5.4MEDIUM

CVE-2012-2592

all versions

Cross-site scripting (XSS) vulnerability in Axigen Mail Server 8.0.1 allows remote attackers to inject arbitrary web script or HTM

CVE-2010-3460

<= 7.4.1

Directory traversal vulnerability in the HTTP interface in AXIGEN Mail Server 7.4.1 for Windows allows remote attackers to read ar

CVE-2010-3459

<= 7.4.1

Cross-site scripting (XSS) vulnerability in the Ajax WebMail interface in AXIGEN Mail Server before 7.4.2 allows remote attackers

CVE-2009-1484

all versions

Cross-site scripting (XSS) vulnerability in the web mail interface feature in AXIGEN Mail Server 6.2.2 allows remote attackers to

CVE-2008-0434

all versions

Format string vulnerability in the AXIMilter module in AXIGEN Mail Server 5.0.2 allows remote attackers to execute arbitrary code

CVE-2007-0887

all versions

axigen 1.2.6 through 2.0.0b1 does not properly parse login credentials, which allows remote attackers to cause a denial of service

CVE-2007-0886

all versions

Heap-based buffer underflow in axigen 1.2.6 through 2.0.0b1 allows remote attackers to cause a denial of service (application cras