https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2018-18621.htmlhttps://patchthecve.com/cve/CVE-2018-18621.htmlWed, 17 Jun 2026 01:47:35 +0000MEDIUM 6.1: CommuniGate Pro 6.2 allows stored XSS via a message body in Pronto! Mail Composer, which is mishandled in /MIME/INBOX-MM-1/ if the raw email link (in .txt format) is modified and then renamed with a .html or .wssp extension.https://patchthecve.com/cve/CVE-2018-3815.htmlhttps://patchthecve.com/cve/CVE-2018-3815.htmlWed, 17 Jun 2026 01:57:50 +0000MEDIUM 5.7: The "XML Interface to Messaging, Scheduling, and Signaling" (XIMSS) protocol implementation in CommuniGate Pro (CGP) 6.2 suffers from a Missing XIMSS Protocol Validation attack that leads to an email spoofing attack, allowing a malicious authenticated attacker to send a message from any source emailhttps://patchthecve.com/cve/CVE-2017-16962.htmlhttps://patchthecve.com/cve/CVE-2017-16962.htmlWed, 17 Jun 2026 01:10:13 +0000MEDIUM 6.1: The WebMail components (Crystal, pronto, and pronto4) in CommuniGate Pro before 6.2.1 have stored XSS vulnerabilities via (1) the location or details field of a Google Calendar invitation, (2) a crafted Outlook.com calendar (aka Hotmail Calendar) invitation, (3) e-mail granting access to a directory