Skip to content
OpenAdvisories

Vendor

MDaemon

2 known vulnerabilities.

Products

Email Server 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-3929

    Stored XSS vulnerability in MDaemon Email Server

    An XSS issue was discovered in MDaemon Email Server version 25.0.1 and below. An attacker can send a specially crafted HTML e-mail message with JavaScript in an img tag. This could allow a remote attacker to load arbitrary JavaScript code in the context of a …

    MDaemon Email Server
  • Medium 5.3
    CVE-2024-11182 Exploited EPSS 33%

    Stored XSS vulnerability in MDaemon Email Server

    An XSS issue was discovered in MDaemon Email Server before version 24.5.1c. An attacker can send an HTML e-mail message with JavaScript in an img tag. This could allow a remote attacker to load arbitrary JavaScript code in the context of a webmail user's brow…

    MDaemon Email Server
    KEV May 19, 2025