Unscored CVE-2006-6964 EUVD-2006-6947GHSA-54wp-7535-r37v

MailEnable Professional before 1.78 provides a cleartext user password when an administrator edits the user's settings, which allows remote…

Published Jan 29, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

MailEnable Professional before 1.78 provides a cleartext user password when an administrator edits the user's settings, which allows remote authenticated administrators to obtain sensitive information by viewing the HTML source.

References

http://www.mailenable.com/Professional1-ReleaseNotes.txt
1016337 vdb-entry
mailenable-listattachments-pass-disclosure(27185) vdb-entry