Javamail (Sun) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2007-11-20. Vendor: Sun.

CVEs of Javamail

• CVE-2007-6059 - CVSS 5 (medium), 2007-11-20: Javamail does not properly handle a series of invalid login attempts in which the same e-mail address is entered as username and password, and the domain…
• CVE-2005-1754 - CVSS 5 (medium), 2005-12-31: JavaMail API 1.1.3 through 1.3, as used by Apache Tomcat 5.0.16, allows remote attackers to read arbitrary files via a full pathname in the argument to the…
• CVE-2005-1753 - CVSS 5 (medium), 2005-12-31: ReadMessage.jsp in JavaMail API 1.1.3 through 1.3, as used by Apache Tomcat 5.0.16, allows remote attackers to view other users' e-mail attachments via a…
• CVE-2005-1105 - CVSS 5 (medium), 2005-05-02: Directory traversal vulnerability in the MimeBodyPart.getFileName method in JavaMail 1.3.2 allows remote attackers to write arbitrary files via a .. (dot dot)…