https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-29965.htmlhttps://patchthecve.com/cve/CVE-2026-29965.htmlMon, 19 Oct 2026 22:10:00 +0000MEDIUM 6.1: HSC MailInspector 5.3.3-7 is vulnerable to Cross Site Scripting (XSS) in the /police/WarningUrlPage.php endpoint due to improper neutralization of user-supplied input that uses alternate or obfuscated JavaScript syntax.https://patchthecve.com/cve/CVE-2026-29964.htmlhttps://patchthecve.com/cve/CVE-2026-29964.htmlMon, 19 Oct 2026 22:10:00 +0000MEDIUM 6.1: HSC MailInspector v5.3.3-7 contains a Cross-Site Scripting (XSS) vulnerability in the /tap/tap.php endpoint due to improper neutralization of user-controlled input using alternate or obfuscated JavaScript syntax. The endpoint reflects unsanitized user input in HTTP responses without adequate output https://patchthecve.com/cve/CVE-2026-29963.htmlhttps://patchthecve.com/cve/CVE-2026-29963.htmlMon, 19 Oct 2026 22:10:00 +0000HIGH 7.5: HSC MailInspector 5.3.3-7 has a Path Traversal vulnerability due to improper validation of user-supplied input in the /tap/dw.php endpoint. The text parameter is used to construct file paths without adequate normalization or restriction to a safe base directory. A remote attacker can exploit this flhttps://patchthecve.com/cve/CVE-2026-29962.htmlhttps://patchthecve.com/cve/CVE-2026-29962.htmlMon, 19 Oct 2026 22:10:00 +0000HIGH 7.5: HSC MailInspector v5.3.3-7 contains a Local File Inclusion (LFI) vulnerability caused by improper control of user-supplied file paths. The endpoint /vendor/phpunit/phpunit.php processes user-controlled parameters that directly affect file access operations without adequate validation, sanitization,