Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor archive

tumbleweed CVEs

Beta · best-effort

5 CVEs tagged to vendor tumbleweed — 1 Critical, 2 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2008-1724

Published Apr 11, 2008

Stack-based buffer overflow in the IActiveXTransfer.FileTransfer method in the SecureTransport FileTransfer ActiveX control in vcst_en.dll 1.0.0.5 in Tumbleweed SecureTransport Se…

CVSS 9.3 · Critical

Vendor/product tagsBeta · best-effort

CVE-2006-4727

Published Dec 31, 2006

Cross-site scripting (XSS) vulnerability in emfadmin/statusView.do in Tumbleweed EMF Administration Module 6.2.2 Build 4123, and possibly other versions before 6.3.2, allows remot…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2006-3901

Published Jul 27, 2006

Multiple stack-based buffer overflows in Tumbleweed Email Firewall (EMF) allow remote attackers to execute arbitrary code via an email attachment with an LHA archive that contains…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2006-0487

Published Feb 1, 2006

Multiple unspecified vulnerabilities in Tumbleweed MailGate Email Firewall (EMF) 6.x allow remote attackers to (1) trigger temporarily incorrect processing of an e-mail message un…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

CVE-2000-0772

Published Oct 20, 2000

The installation of Tumbleweed Messaging Management System (MMS) 4.6 and earlier (formerly Worldtalk Worldsecure) creates a default account "sa" with no password.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-5 of 5 CVEsPage 1 of 1