# cve.now: Mailenable

The newest entries naming Mailenable as an affected vendor (up to 200), of 32 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-125393](https://cve.now/CVE-2026-125393.md): MailEnable Enterprise Premium before 10.62 Heap Overflow via IMAP X-FB-FETCH (CVSS 7.1)
- [CVE-2026-114552](https://cve.now/CVE-2026-114552.md): MailEnable parseObjectResponse XML External Entity Processing Information Disclosure Vulnerability (CVSS 6.5)
- [CVE-2026-114551](https://cve.now/CVE-2026-114551.md): MailEnable Auth Cleartext Storage Information Disclosure Vulnerability (CVSS 5.9)
- [CVE-2026-44400](https://cve.now/CVE-2026-44400.md): MailEnable Enterprise Premium \< 10.55 Authorization Bypass via WebAdmin (CVSS 8.7)
- [CVE-2026-32852](https://cve.now/CVE-2026-32852.md): MailEnable \< 10.55 Reflected XSS via FreeBusy.aspx StartDate Parameter (CVSS 5.1)
- [CVE-2026-32851](https://cve.now/CVE-2026-32851.md): MailEnable \< 10.55 Reflected XSS via FreeBusy.aspx StartDate Parameter (CVSS 5.1)
- [CVE-2026-32850](https://cve.now/CVE-2026-32850.md): MailEnable \< 10.55 Reflected XSS via ManageShares.aspx SelectedIndex Parameter (CVSS 5.1)
- [CVE-2025-34427](https://cve.now/CVE-2025-34427.md): MailEnable \< 10.54 Cleartext Credential Storage in AUTH.TAB (CVSS 8.4)
- [CVE-2025-34428](https://cve.now/CVE-2025-34428.md): MailEnable \< 10.54 Cleartext Credential Storage in AUTH.SAV (CVSS 8.4)
- [CVE-2025-34421](https://cve.now/CVE-2025-34421.md): MailEnable \< 10.54 DLL Hijacking via Unsafe Loading of MEAISP.DLL (CVSS 8.5)
- [CVE-2025-34417](https://cve.now/CVE-2025-34417.md): MailEnable \< 10.54 DLL Hijacking via Unsafe Loading of MEAISO.DLL (CVSS 8.5)
- [CVE-2025-34419](https://cve.now/CVE-2025-34419.md): MailEnable \< 10.54 DLL Hijacking via Unsafe Loading of MEAISM.DLL (CVSS 8.5)
- [CVE-2025-34416](https://cve.now/CVE-2025-34416.md): MailEnable \< 10.54 DLL Hijacking via Unsafe Loading of MEAIPO.DLL (CVSS 8.5)
- [CVE-2025-34422](https://cve.now/CVE-2025-34422.md): MailEnable \< 10.54 DLL Hijacking via Unsafe Loading of MEAIPC.DLL (CVSS 8.5)
- [CVE-2025-34418](https://cve.now/CVE-2025-34418.md): MailEnable \< 10.54 DLL Hijacking via Unsafe Loading of MEAIMF.DLL (CVSS 8.5)
- [CVE-2025-34424](https://cve.now/CVE-2025-34424.md): MailEnable \< 10.54 DLL Hijacking via Unsafe Loading of MEAIDP.DLL (CVSS 8.5)
- [CVE-2025-34423](https://cve.now/CVE-2025-34423.md): MailEnable \< 10.54 DLL Hijacking via Unsafe Loading of MEAIAU.DLL (CVSS 8.5)
- [CVE-2025-34420](https://cve.now/CVE-2025-34420.md): MailEnable \< 10.54 DLL Hijacking via Unsafe Loading of MEAIAM.DLL (CVSS 8.5)
- [CVE-2025-34425](https://cve.now/CVE-2025-34425.md): MailEnable \< 10.54 Reflected XSS in WindowContext Parameter of MAI/compose.aspx (CVSS 5.3)
- [CVE-2025-34396](https://cve.now/CVE-2025-34396.md): MailEnable \< 10.54 DLL Hijacking via Unsafe Loading of MEAINFY.DLL (CVSS 8.5)
- [CVE-2025-34408](https://cve.now/CVE-2025-34408.md): MailEnable \< 10.54 Reflected XSS in Added Parameter of MAI/AddRecipientsResult.aspx (CVSS 5.3)
- [CVE-2025-34398](https://cve.now/CVE-2025-34398.md): MailEnable \< 10.54 Reflected XSS in AddressesBcc Parameter of AddressBook.aspx (CVSS 5.3)
- [CVE-2025-34399](https://cve.now/CVE-2025-34399.md): MailEnable \< 10.54 Reflected XSS in AddressesCc Parameter of AddressBook.aspx (CVSS 5.3)
- [CVE-2025-34400](https://cve.now/CVE-2025-34400.md): MailEnable \< 10.54 Reflected XSS in AddressesTo Parameter of AddressBook.aspx (CVSS 5.3)
- [CVE-2025-34409](https://cve.now/CVE-2025-34409.md): MailEnable \< 10.54 Reflected XSS in Failed Parameter of MAI/AddRecipientsResult.aspx (CVSS 5.3)
- [CVE-2025-34401](https://cve.now/CVE-2025-34401.md): MailEnable \< 10.54 Reflected XSS in FieldBcc Parameter of AddressBook.aspx (CVSS 5.3)
- [CVE-2025-34402](https://cve.now/CVE-2025-34402.md): MailEnable \< 10.54 Reflected XSS in FieldCc Parameter of AddressBook.aspx (CVSS 5.3)
- [CVE-2025-34403](https://cve.now/CVE-2025-34403.md): MailEnable \< 10.54 Reflected XSS in FieldTo Parameter of AddressBook.aspx (CVSS 5.3)
- [CVE-2025-34406](https://cve.now/CVE-2025-34406.md): MailEnable \< 10.54 Reflected XSS in Id Parameter of Mobile/ContactDetails.aspx (CVSS 5.3)
- [CVE-2025-34404](https://cve.now/CVE-2025-34404.md): MailEnable \< 10.54 Reflected XSS in InstanceScope Parameter of CAL/compose.aspx (CVSS 5.3)
- [CVE-2025-34397](https://cve.now/CVE-2025-34397.md): MailEnable \< 10.54 Reflected XSS in Message Parameter of Mobile/Compose.aspx (CVSS 5.3)
- [CVE-2025-34407](https://cve.now/CVE-2025-34407.md): MailEnable \< 10.54 Reflected XSS in theme Parameter of Statistics.aspx (CVSS 5.3)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/mailenable
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.