This page aggregates publicly disclosed CVE and security risk information related to aeromail, with CVSS, EPSS, publication dates, and vulnerability intelligence data to help assess potential risk and remediation priority.
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2002-0411 | Cross-site scripting vulnerability in message.php for AeroMail before 1.45 allows remote attackers to execute Javascript as an AeroMail user via an email message with the script in the Subject line. | [email protected] | 7.5 | 1.08% | 2002-08-12 | 2026-04-16 |
| CVE-2002-0410 | send_message.php in AeroMail before 1.45 allows remote attackers to read arbitrary files on the server, instead of just uploaded files, via an attachment that modifies the filename to be uploaded. | [email protected] | 5.0 | 1.75% | 2002-07-26 | 2026-04-16 |