Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

MailEnable — Vulnerabilities & Security Advisories 30

All 30 CVE vulnerabilities found in MailEnable, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security weaknesses affecting the MailEnable email server software developed by MailEnable Corporation. The collection encompasses a wide spectrum of critical flaws, including remote code execution, buffer overflows, and privilege escalation issues, spanning the product's entire release history from its initial launch to the present day. Visitors can utilize this resource to track the vendor's official security advisories, analyze the prevalence and impact of specific vulnerability classes within mail server infrastructure, or review the complete historical record of security defects associated with this specific product. The data is curated to assist security professionals, system administrators, and researchers in assessing risk exposure and implementing necessary mitigations without relying on scattered or fragmented sources. By centralizing these findings, the page offers a clear view of the security posture evolution for MailEnable installations over time. Users seeking to understand the technical details of past exploits or to verify if their current deployment version is affected will find comprehensive summaries and references to original disclosures. This repository serves as a factual reference point for audit compliance, vulnerability management programs, and incident response planning related to MailEnable environments. All entries are verified against authoritative databases to ensure accuracy and relevance for current threat landscapes.

Vendor: MailEnable

CVE ID Title CVSS Severity Published
CVE-2026-114552 MailEnable parseObjectResponse XML External Entity Processing Information Disclosure Vulnerability CWE-611 - - 2026-11-03
CVE-2026-114551 MailEnable Auth Cleartext Storage Information Disclosure Vulnerability CWE-312 - - 2026-11-03
CVE-2026-32852 MailEnable < 10.55 Reflected XSS via FreeBusy.aspx StartDate Parameter CWE-79 6.1 - 2026-03-23
CVE-2026-32851 MailEnable < 10.55 Reflected XSS via FreeBusy.aspx StartDate Parameter CWE-79 6.1 - 2026-03-23
CVE-2026-32850 MailEnable < 10.55 Reflected XSS via ManageShares.aspx SelectedIndex Parameter CWE-79 6.1 - 2026-03-23
CVE-2025-34427 MailEnable < 10.54 Cleartext Credential Storage in AUTH.TAB CWE-312 7.8AI High AI 2025-12-10
CVE-2025-34428 MailEnable < 10.54 Cleartext Credential Storage in AUTH.SAV CWE-312 7.8AI High AI 2025-12-10
CVE-2025-34421 MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAISP.DLL CWE-427 6.7AI Medium AI 2025-12-10
CVE-2025-34417 MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAISO.DLL CWE-427 6.7AI Medium AI 2025-12-10
CVE-2025-34419 MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAISM.DLL CWE-427 6.7AI Medium AI 2025-12-10
CVE-2025-34416 MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIPO.DLL CWE-427 6.7AI Medium AI 2025-12-10
CVE-2025-34422 MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIPC.DLL CWE-427 6.7AI Medium AI 2025-12-10
CVE-2025-34418 MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIMF.DLL CWE-427 6.7AI Medium AI 2025-12-10
CVE-2025-34424 MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIDP.DLL CWE-427 6.7AI Medium AI 2025-12-10
CVE-2025-34423 MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIAU.DLL CWE-427 6.7AI Medium AI 2025-12-10
CVE-2025-34420 MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIAM.DLL CWE-427 6.7AI Medium AI 2025-12-10
CVE-2025-34425 MailEnable < 10.54 Reflected XSS in WindowContext Parameter of MAI/compose.aspx CWE-79 6.1AI Medium AI 2025-12-09
CVE-2025-34396 MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAINFY.DLL CWE-427 6.5AI Medium AI 2025-12-09
CVE-2025-34408 MailEnable < 10.54 Reflected XSS in Added Parameter of MAI/AddRecipientsResult.aspx CWE-79 6.1 - 2025-12-09
CVE-2025-34398 MailEnable < 10.54 Reflected XSS in AddressesBcc Parameter of AddressBook.aspx CWE-79 6.1 - 2025-12-09
CVE-2025-34399 MailEnable < 10.54 Reflected XSS in AddressesCc Parameter of AddressBook.aspx CWE-79 6.1 - 2025-12-09
CVE-2025-34400 MailEnable < 10.54 Reflected XSS in AddressesTo Parameter of AddressBook.aspx CWE-79 6.1 - 2025-12-09
CVE-2025-34409 MailEnable < 10.54 Reflected XSS in Failed Parameter of MAI/AddRecipientsResult.aspx CWE-79 6.1 - 2025-12-09
CVE-2025-34401 MailEnable < 10.54 Reflected XSS in FieldBcc Parameter of AddressBook.aspx CWE-79 6.1 - 2025-12-09
CVE-2025-34402 MailEnable < 10.54 Reflected XSS in FieldCc Parameter of AddressBook.aspx CWE-79 6.1 - 2025-12-09
CVE-2025-34403 MailEnable < 10.54 Reflected XSS in FieldTo Parameter of AddressBook.aspx CWE-79 6.1 - 2025-12-09
CVE-2025-34406 MailEnable < 10.54 Reflected XSS in Id Parameter of Mobile/ContactDetails.aspx CWE-79 6.1 - 2025-12-09
CVE-2025-34404 MailEnable < 10.54 Reflected XSS in InstanceScope Parameter of CAL/compose.aspx CWE-79 6.1 - 2025-12-09
CVE-2025-34397 MailEnable < 10.54 Reflected XSS in Message Parameter of Mobile/Compose.aspx CWE-79 6.1 - 2025-12-09
CVE-2025-34407 MailEnable < 10.54 Reflected XSS in theme Parameter of Statistics.aspx CWE-79 6.1 - 2025-12-09

All 30 known CVE vulnerabilities affecting MailEnable with full Chinese analysis, references, and POCs where available.