PatchTheCVE: reddoxxhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2020-26554: REDDOXX MailDepot 2033 (aka 2.3.3022) allows XSS via an incoming HTML e-mail message.https://patchthecve.com/cve/CVE-2020-26554.htmlhttps://patchthecve.com/cve/CVE-2020-26554.htmlWed, 17 Jun 2026 03:08:11 +0000MEDIUM 6.1: REDDOXX MailDepot 2033 (aka 2.3.3022) allows XSS via an incoming HTML e-mail message.CVE-2019-19200: REDDOXX MailDepot 2032 2.2.1242 allows authenticated users to access the mailboxes of other users.https://patchthecve.com/cve/CVE-2019-19200.htmlhttps://patchthecve.com/cve/CVE-2019-19200.htmlWed, 17 Jun 2026 02:26:16 +0000HIGH 8.8: REDDOXX MailDepot 2032 2.2.1242 allows authenticated users to access the mailboxes of other users.CVE-2019-19199: REDDOXX MailDepot 2032 SP2 2.2.1242 has Insufficient Session Expiration because tokens are not invalidated upohttps://patchthecve.com/cve/CVE-2019-19199.htmlhttps://patchthecve.com/cve/CVE-2019-19199.htmlWed, 17 Jun 2026 02:26:16 +0000HIGH 7.4: REDDOXX MailDepot 2032 SP2 2.2.1242 has Insufficient Session Expiration because tokens are not invalidated upon a logout.