Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Interspire

First CVE: Mar 23, 2005Active for: 21 yearsTotal CVEs: 25
47.5
VTI Score
High

Interspire develops a narrow product line centered on email marketing and knowledge management software, with a modest but recurring vulnerability footprint that achieves prominence disproportionate to its CVE volume through persistent public exploit availability. The exposure recurs across products such as Email Marketer, ActiveKB, and ArticleLive and their newer NX variants, clustering around web application input-handling weaknesses including SQL injection, cross-site scripting, path traversal, and improper authentication mechanisms. These weakness classes are characteristic of legacy web applications and reflect insufficient input sanitization and access control, both common targets for tooling and exploitation frameworks. Defenders operating these platforms should treat available exploit code as an immediate patching trigger and prioritize network segmentation and access controls around the email and knowledge-management tiers; current severity, exploitation activity, and exposure counts are shown alongside this summary.

FAUCET AI Generated
25
Total CVEs
More Total CVEs than 97% of tracked vendors
0.3
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 2% of tracked vendors
6.9
Avg CVSS Score
Higher Avg CVSS Score than 49% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Interspire over time

Volume of CVEsAvg CVSS Base Score
First CVE
Mar 23, 2005
21 years ago
Most Recent CVE
Dec 9, 2022
1,323 days ago

Products(10 total)

Top CVEs

Signals from CVEs in this vendor scope (25 CVEs).

25 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2017-14322CRITICAL
The function in charge to check whether the user is already logged in init.php in Interspire Email Marketer (IEM) prior to 6.1.6 allows remote attackers to bypass authentication an
Oct 18, 20179.862NOYES
CVE-2018-19550HIGH
Interspire Email Marketer through 6.1.6 allows arbitrary file upload via a surveys_submit.php "create survey and submit survey" operation, which can cause a .php file to be accessi
Nov 26, 20188.840NOYES
CVE-2009-4957HIGH
Directory traversal vulnerability in loadpanel.php in Interspire ActiveKB allows remote attackers to read arbitrary files and possibly have unspecified other impact via directory t
Jul 22, 20107.533NOYES
CVE-2007-1060MEDIUM
Multiple PHP remote file inclusion vulnerabilities in Interspire SendStudio 2004.14 and earlier, when register_globals and allow_fopenurl are enabled, allow remote attackers to exe
Feb 22, 20076.831NOYES
CVE-2008-2338HIGH
Interspire ActiveKB 1.5 and earlier allows remote attackers to gain privileges by setting the auth cookie to true when accessing unspecified scripts in /admin.
May 19, 20087.530NOYES
CVE-2022-40777HIGH
Interspire Email Marketer through 6.5.0 allows arbitrary file upload via a surveys_submit.php "create survey and submit survey" operation, which can cause a .php file to be accessi
Oct 11, 20228.828NONO
CVE-2007-5131HIGH
SQL injection vulnerability in index.php in Interspire ActiveKB NX 2.x allows remote attackers to execute arbitrary SQL commands via the catId parameter in a browse action. NOTE:
Sep 27, 20077.528NOYES
CVE-2018-19553HIGH
Interspire Email Marketer through 6.1.6 has SQL Injection via an updateblock sortorder request to Dynamiccontenttags.php
Nov 26, 20188.827NONO
CVE-2018-19552HIGH
Interspire Email Marketer through 6.1.6 has SQL Injection via a deleteblock blockid[] request to Dynamiccontenttags.php.
Nov 26, 20188.827NONO
CVE-2018-19551HIGH
Interspire Email Marketer through 6.1.6 has SQL Injection via a checkduplicatetags tagname request to Dynamiccontenttags.php.
Nov 26, 20188.827NONO
View all 25 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products25 CVEs
40%
56%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network9 (36.0%)
Unknown16 (64.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low9 (36.0%)
High0 (0.0%)
Unknown16 (64.0%)
User Interaction
None9 (36.0%)
Unknown16 (64.0%)
Required0 (0.0%)
Privileges Required
Low7 (28.0%)
High0 (0.0%)
None2 (8.0%)
Unknown16 (64.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (25 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
10 CVEs
40.0% of CVEs· 80th percentile

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Interspire.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Interspire — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Interspire's Products

View all 1 CNAs →

Top CWEs