PatchTheCVE: scanmailhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2019-14688: Trend Micro has repackaged installers for several Trend Micro products that were found to utilize a version ofhttps://patchthecve.com/cve/CVE-2019-14688.htmlhttps://patchthecve.com/cve/CVE-2019-14688.htmlWed, 17 Jun 2026 02:18:49 +0000HIGH 7.0: Trend Micro has repackaged installers for several Trend Micro products that were found to utilize a version of an install package that had a DLL hijack vulnerability that could be exploited during a new product installation. The vulnerability was found to ONLY be exploitable during an initial producCVE-2017-14093: The Log Query and Quarantine Query pages in Trend Micro ScanMail for Exchange 12.0 are vulnerable to cross sithttps://patchthecve.com/cve/CVE-2017-14093.htmlhttps://patchthecve.com/cve/CVE-2017-14093.htmlWed, 17 Jun 2026 01:05:34 +0000MEDIUM 6.1: The Log Query and Quarantine Query pages in Trend Micro ScanMail for Exchange 12.0 are vulnerable to cross site scripting (XSS) attacks.CVE-2017-14092: The absence of Anti-CSRF tokens in Trend Micro ScanMail for Exchange 12.0 web interface forms could allow an ahttps://patchthecve.com/cve/CVE-2017-14092.htmlhttps://patchthecve.com/cve/CVE-2017-14092.htmlWed, 17 Jun 2026 01:05:34 +0000HIGH 8.8: The absence of Anti-CSRF tokens in Trend Micro ScanMail for Exchange 12.0 web interface forms could allow an attacker to submit authenticated requests when an authenticated user browses an attacker-controlled domain.CVE-2017-14091: A vulnerability in Trend Micro ScanMail for Exchange 12.0 exists in which certain specific installations that https://patchthecve.com/cve/CVE-2017-14091.htmlhttps://patchthecve.com/cve/CVE-2017-14091.htmlWed, 17 Jun 2026 01:05:34 +0000HIGH 7.5: A vulnerability in Trend Micro ScanMail for Exchange 12.0 exists in which certain specific installations that utilize a uncommon feature - Other Update Sources - could be exploited to overwrite sensitive files in the ScanMail for Exchange directory.CVE-2017-14090: A vulnerability in Trend Micro ScanMail for Exchange 12.0 exists in which some communications to the update sehttps://patchthecve.com/cve/CVE-2017-14090.htmlhttps://patchthecve.com/cve/CVE-2017-14090.htmlWed, 17 Jun 2026 01:05:34 +0000CRITICAL 9.1: A vulnerability in Trend Micro ScanMail for Exchange 12.0 exists in which some communications to the update servers are not encrypted.CVE-2015-3326: Trend Micro ScanMail for Microsoft Exchange (SMEX) 10.2 before Hot Fix Build 3318 and 11.0 before Hot Fix Builhttps://patchthecve.com/cve/CVE-2015-3326.htmlhttps://patchthecve.com/cve/CVE-2015-3326.htmlWed, 17 Jun 2026 00:25:44 +0000MEDIUM 5.0: Trend Micro ScanMail for Microsoft Exchange (SMEX) 10.2 before Hot Fix Build 3318 and 11.0 before Hot Fix Build 4180 creates session IDs for the web console using a random number generator with predictable values, which makes it easier for remote attackers to bypass authentication via a brute force