https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2009-3838.htmlhttps://patchthecve.com/cve/CVE-2009-3838.htmlTue, 16 Jun 2026 23:12:27 +0000HIGH 9.3: Stack-based buffer overflow in Pegasus Mail (PMail) 4.41 and possibly 4.51 allows remote POP3 servers to cause a denial of service (application crash) or possibly execute arbitrary code via a long error message.https://patchthecve.com/cve/CVE-2002-1075.htmlhttps://patchthecve.com/cve/CVE-2002-1075.htmlTue, 16 Jun 2026 21:58:40 +0000HIGH 7.5: Buffer overflow in Pegasus mail client 4.01 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long (1) To or (2) From headers.https://patchthecve.com/cve/CVE-2000-0931.htmlhttps://patchthecve.com/cve/CVE-2000-0931.htmlFri, 25 Sep 2026 17:10:00 +0000HIGH 7.5: Buffer overflow in Pegasus Mail 3.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long email message containing binary data.https://patchthecve.com/cve/CVE-2000-0930.htmlhttps://patchthecve.com/cve/CVE-2000-0930.htmlWed, 23 Sep 2026 09:10:01 +0000MEDIUM 5.0: Pegasus Mail 3.12 allows remote attackers to read arbitrary files via an embedded URL that calls the mailto: protocol with a -F switch.https://patchthecve.com/cve/CVE-1999-1366.htmlhttps://patchthecve.com/cve/CVE-1999-1366.htmlTue, 16 Jun 2026 21:50:17 +0000LOW 3.6: Pegasus e-mail client 3.0 and earlier uses weak encryption to store POP3 passwords in the pmail.ini file, which allows local users to easily decrypt the passwords and read e-mail.