Stalker maintains a modestly represented portfolio of email and messaging server products, including CommuniGate Pro and related variants, that handle authentication and file-system operations across enterprise communication infrastructure. Its vulnerability disclosures center on authentication weaknesses, sensitive information exposure, and path-traversal conditions that reflect the trust and data-access requirements of mail-server design, and these issues frequently acquire public exploit code. Live severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Stalker over time
Signals from CVEs in this vendor scope (13 CVEs).
13 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2006-0468HIGH CommuniGate Pro Core Server before 5.0.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via LDAP messages with negative BER length | Jan 30, 2006 | 7.5 | 33 | NO | YES |
CVE-2004-0234HIGH Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local user | Aug 18, 2004 | 10.0 | 29 | NO | NO |
CVE-2007-2718MEDIUM Cross-site scripting (XSS) vulnerability in the WebMail system in Stalker CommuniGate Pro 5.1.8 and earlier, when using Microsoft Internet Explorer, allows remote attackers to inje | May 16, 2007 | 4.3 | 27 | NO | YES |
CVE-2000-1002MEDIUM POP3 daemon in Stalker CommuniGate Pro 3.3.2 generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to determine valid ema | Dec 11, 2000 | 5.0 | 25 | NO | YES |
CVE-2000-0634MEDIUM The web administration interface for CommuniGate Pro 3.2.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack. | Apr 3, 2000 | 5.0 | 25 | NO | YES |
CVE-2003-1481MEDIUM CommuniGate Pro 3.1 through 4.0.6 sends the session ID in the referer field for an HTTP request for an image, which allows remote attackers to hijack mail sessions via an e-mail wi | Dec 31, 2003 | 5.8 | 24 | NO | YES |
CVE-1999-1504MEDIUM Stalker Internet Mail Server 1.6 allows a remote attacker to cause a denial of service (crash) via a long HELO command. | Apr 8, 1998 | 5.0 | 23 | NO | YES |
CVE-2018-3815MEDIUM The "XML Interface to Messaging, Scheduling, and Signaling" (XIMSS) protocol implementation in CommuniGate Pro (CGP) 6.2 suffers from a Missing XIMSS Protocol Validation attack tha | Jan 8, 2018 | 5.7 | 20 | NO | NO |
CVE-2004-0235MEDIUM Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with (1) .. sequenc | Aug 18, 2004 | 6.4 | 18 | NO | NO |
CVE-2006-3477MEDIUM Unspecified vulnerability in the POP service in Stalker CommuniGate Pro 5.1c1 and earlier allows remote attackers to cause a denial of service (server crash) via unspecified vector | Jul 10, 2006 | 5.0 | 15 | NO | NO |
Signals from CVEs in this vendor scope (13 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Stalker.
Media articles that mention a CVE ID that affects a product developed by Stalker — matched by CVE ID, not by vendor name.