PatchTheCVE: ironmailhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2007-1723: Multiple cross-site scripting (XSS) vulnerabilities in the administration console in Secure Computing CipherTrhttps://patchthecve.com/cve/CVE-2007-1723.htmlhttps://patchthecve.com/cve/CVE-2007-1723.htmlTue, 16 Jun 2026 22:38:10 +0000MEDIUM 6.8: Multiple cross-site scripting (XSS) vulnerabilities in the administration console in Secure Computing CipherTrust IronMail 6.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) network, (2) defRouterIp, (3) hostName, (4) domainName, (5) ipAddress, (6) defaultRouter, (7) dnsCVE-2006-5210: Directory traversal vulnerability in IronWebMail before 6.1.1 HotFix-17 allows remote attackers to read arbitrhttps://patchthecve.com/cve/CVE-2006-5210.htmlhttps://patchthecve.com/cve/CVE-2006-5210.htmlTue, 16 Jun 2026 22:30:45 +0000MEDIUM 5.0: Directory traversal vulnerability in IronWebMail before 6.1.1 HotFix-17 allows remote attackers to read arbitrary files via a GET request to the IM_FILE identifier with double-url-encoded "../" sequences ("%252e%252e/").CVE-2006-0538: CipherTrust IronMail 5.0.1, when "Denial of Service Protection" is enabled, allows remote attackers to cause ahttps://patchthecve.com/cve/CVE-2006-0538.htmlhttps://patchthecve.com/cve/CVE-2006-0538.htmlTue, 16 Jun 2026 22:20:48 +0000LOW 2.6: CipherTrust IronMail 5.0.1, when "Denial of Service Protection" is enabled, allows remote attackers to cause a denial of service (possibly CPU consumption) via a SYN flood with malformed TCP packets from multiple connections.