cvedb.io
CVE-2015-5379
MEDIUM · CVSS 5.4
EPSS exploitation probability: 0%
Published 2017-10-23T18:29:00.710 · Last modified 2026-06-17T00:29:03.090

Summary

Cross-site scripting (XSS) vulnerability in actions.hsp in the Ajax WebMail interface in AXIGEN Mail Server before 9.0 allows remote attackers to inject arbitrary web script or HTML via an email attachment.

Affected products

axigen — axigen_mail_server

Does this affect you?

Add your gear to cvedb and we'll alert you only when axigen ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.