Skip to content
OpenAdvisories
Unscored DSA-1188-1 2 CVEs

mailman

Published Oct 4, 2006 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 3.1 mailman 2.1.5-8sarge5

Vulnerabilities 2

  • Unscored —
    CVE-2006-3636 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.9rc1 allow remote attackers to inject arbitra…

  • Unscored —

    CRLF injection vulnerability in Utils.py in Mailman before 2.1.9rc1 allows remote attackers to spoof messages in the er…