https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2019-9557.htmlhttps://patchthecve.com/cve/CVE-2019-9557.htmlWed, 17 Jun 2026 02:43:57 +0000MEDIUM 6.1: Ability Mail Server 4.2.6 has Persistent Cross Site Scripting (XSS) via the body e-mail body. To exploit the vulnerability, the victim must open an email with malicious Javascript inserted into the body of the email as an iframe.https://patchthecve.com/cve/CVE-2017-17752.htmlhttps://patchthecve.com/cve/CVE-2017-17752.htmlWed, 17 Jun 2026 01:11:35 +0000MEDIUM 6.1: Ability Mail Server 3.3.2 has Cross Site Scripting (XSS) via the body of an e-mail message, with JavaScript code executed on the Read Mail screen (aka the /_readmail URI). This is fixed in version 4.2.4.https://patchthecve.com/cve/CVE-2013-6162.htmlhttps://patchthecve.com/cve/CVE-2013-6162.htmlWed, 17 Jun 2026 00:00:00 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in Code-Crafters Ability Mail Server 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the body of an email.