https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2007-0543.htmlhttps://patchthecve.com/cve/CVE-2007-0543.htmlTue, 16 Jun 2026 22:35:47 +0000HIGH 9.4: ZixForum 1.14 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for Zixforum.mdb. NOTE: a followup post suggests that this issue only occurs if the administratohttps://patchthecve.com/cve/CVE-2006-4612.htmlhttps://patchthecve.com/cve/CVE-2006-4612.htmlTue, 16 Jun 2026 22:29:27 +0000HIGH 7.5: SQL injection vulnerability in ReplyNew.asp in ZIXForum 1.12 allows remote attackers to execute arbitrary SQL commands via the RepId parameter.https://patchthecve.com/cve/CVE-2006-2541.htmlhttps://patchthecve.com/cve/CVE-2006-2541.htmlTue, 16 Jun 2026 22:25:17 +0000HIGH 7.5: SQL injection vulnerability in settings.asp in Zixforum 1.12 allows remote attackers to execute arbitrary SQL commands via the layid parameter to (1) login.asp and (2) main.asp.https://patchthecve.com/cve/CVE-2005-4334.htmlhttps://patchthecve.com/cve/CVE-2005-4334.htmlTue, 16 Jun 2026 22:18:36 +0000HIGH 7.5: SQL injection vulnerability in ZixForum 1.12 allows remote attackers to execute arbitrary SQL commands via the H_ID parameter to (1) zixforum/forum.asp, as used in (2) Headforums.asp and (3) Subject.asp.