Aggregates CVE and security vulnerability intelligence across all dounokouno-related products, including CVSS, EPSS, publication dates, and vulnerability intelligence data.
Historical issues mainly involve vendor risk cross-site scripting and vendor risk path handling and related problems; some flaws may lead to vendor impact file overwrite and vendor impact session compromise.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2022-22146 | Cross-site scripting vulnerability in TransmitMail 2.5.0 to 2.6.1 allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vectors. | [email protected] | 6.1 | 0.76% | 2022-02-08 | 2026-06-17 |
| CVE-2022-21193 | Directory traversal vulnerability in TransmitMail 2.5.0 to 2.6.1 allows a remote unauthenticated attacker to obtain an arbitrary file on the server via unspecified vectors. | [email protected] | 7.5 | 1.97% | 2022-02-08 | 2026-06-17 |
| CVE-2015-0911 | Directory traversal vulnerability in TAGAWA Takao TransmitMail 1.0.11 through 1.5.8 allows remote attackers to read arbitrary files via vectors related to attachment handling. | [email protected] | 5.0 | 1.87% | 2015-04-23 | 2026-06-16 |
| CVE-2015-0910 | Cross-site scripting (XSS) vulnerability in TAGAWA Takao TransmitMail 1.0.11 through 1.5.8 allows remote attackers to inject arbitrary web script or HTML via a crafted filename. | [email protected] | 4.3 | 1.12% | 2015-04-23 | 2026-06-16 |