Argosoft Mail Server

Vendor:

First CVE: Oct 4, 2002 · Active for 23 years

Total CVEs

More Total CVEs than 89% of tracked products

3.7

Avg CVEs / Year

Higher CVE frequency than 83% of tracked products

5.0

Avg CVSS

Higher Avg CVSS than 9% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Argosoft Mail Server over time

Volume of CVEsAvg CVSS Base Score

First CVE

Oct 4, 2002

23 years ago

Most Recent CVE

Mar 3, 2006

7,448 days ago

CVE Severity & Scoring

Argosoft Mail Server11 CVEs

82%

18%

All CVEs352,231 CVEs

45%

40%

11%

MediumHigh

Attack Vector

Local0 (0.0%)

Network0 (0.0%)

Unknown11 (100.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low0 (0.0%)

High0 (0.0%)

Unknown11 (100.0%)

User Interaction

None0 (0.0%)

Unknown11 (100.0%)

Required0 (0.0%)

Privileges Required

Low0 (0.0%)

High0 (0.0%)

None0 (0.0%)

Unknown11 (100.0%)

Top CVEs

Signals from CVEs in this product scope (11 CVEs).

11 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2002-1004MEDIUM Directory traversal vulnerability in webmail feature of ArGoSoft Mail Server Plus or Pro 1.8.1.5 and earlier allows remote attackers to read arbitrary files via .. (dot dot) sequen	Oct 4, 2002	5.0	25	NO	YES
CVE-2005-1284HIGH The addnew script in Argosoft Mail Server Pro 1.8.7.6 allows remote attackers to create arbitrary accounts, even if "Allow Creation of Accounts From the Web Interface" is disabled,	May 2, 2005	7.5	19	NO	NO
CVE-2005-1283HIGH Multiple directory traversal vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote authenticated users to (1) read arbitrary files via the UIDL parameter to the msg scri	Apr 22, 2005	7.5	19	NO	NO
CVE-2006-0978MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in the View Headers (aka viewheaders) functionality in ArGoSoft Mail Server Pro 1.8.8.5 allow remote attackers to inject arbitra	Mar 3, 2006	4.3	18	NO	NO
CVE-2002-1893MEDIUM Cross-site scripting (XSS) vulnerability in ArGoSoft Mail Server Pro 1.8.1.9 allows remote attackers to inject arbitrary web script or HTML via the e-mail message.	Dec 31, 2002	4.3	18	NO	NO
CVE-2006-0928MEDIUM The POP3 Server in ArGoSoft Mail Server Pro 1.8 allows remote attackers to obtain sensitive information via the _DUMP command, which reveals the operating system, registered user,	Feb 28, 2006	5.0	15	NO	NO
CVE-2005-0367MEDIUM Multiple directory traversal vulnerabilities in ArGoSoft Mail Server 1.8.7.3 allow remote authenticated users to read, delete, or upload arbitrary files via a .. (dot dot) in (1) t	Feb 9, 2005	4.6	15	NO	NO
CVE-2002-1005MEDIUM ArGoSoft Mail Server 1.8.1.7 and earlier allows a webmail user to cause a denial of service (CPU consumption) by forwarding the email to the user while autoresponse is enabled, whi	Oct 4, 2002	5.0	15	NO	NO
CVE-2006-0929MEDIUM Directory traversal vulnerability in the IMAP server in ArGoSoft Mail Server Pro 1.8.8.1 allows remote authenticated users to create arbitrary folders via a .. (dot dot) in the REN	Feb 28, 2006	4.0	14	NO	NO
CVE-2006-0930MEDIUM Directory traversal vulnerability in Webmail in ArGoSoft Mail Server Pro 1.8 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the UIDL parameter.	Feb 28, 2006	4.0	14	NO	NO

View all 11 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (11 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

1 CVE

9.1% of CVEs· 89th percentile

Social Chatter

Signals from CVEs in this product scope (11 CVEs).

Media Mentions

Signals from CVEs in this product scope (11 CVEs).

Top CNAs Publishing CVEs For Argosoft Mail Server

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	Exploits
1.8.8.5	1	4.3	2.1%	0
1.8.8.1	1	4.0	1.3%	0
1.8.7.6	3	6.4	1.5%	0
1.8.7.3	1	4.6	1.9%	0
1.8.1.9	1	4.3	1.2%	0
1.8.1.7	1	5.0	2.0%	0
1.8.1.6	1	5.0	2.0%	0
1.8.1.5	2	5.0	6.2%	1
1.8	2	4.5	1.7%	0