Mailsweeper vulnerabilitiesRanked by how likely they are to be used.
Mailsweeper is made by Clearswift. We track 17 published vulnerabilities listed under that exact name, across 16 versions. None of them is on the list of flaws known to be exploited today. Clearswift lists newer releases under their own names, such as Mailsweeper for Smtp, so check those pages too.
We keep watching the known-exploited list.
Is Mailsweeper listed under other names? Yes.
Clearswift also lists Mailsweeper under more specific names, such as Mailsweeper for Smtp and Mailsweeper for Exchange. Flaws listed only under those names are counted on their own pages, not here. If you run one of these, open its page for its own exploited flaws.
Which Mailsweeper vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Mailsweeper's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Mailsweeper flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 10%CVE-2004-0234Critical
Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local users to execute arbitrary code via long...
- 4.1%CVE-2004-0235Medium
Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with (1) ..
- 3.1%CVE-2003-0121High
Clearswift MAILsweeper 4.x allows remote attackers to bypass attachment detection via an attachment that does not specify a MIME-Version header field, which is processed by some mail clients.
- 2.4%CVE-2003-1016High
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use malformed quoting in MIME headers, parameters, and values, including (1)...
- 2.4%CVE-2003-1014High
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use multiple MIME fields with the same name, which may be interpreted differently...
- 2.4%CVE-2003-1015High
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use whitespace in an unusual fashion, which may be interpreted differently by mail...
- 2.4%CVE-2004-0161High
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use RFC2231 encoding, which may be interpreted differently by mail clients.
- 2.4%CVE-2004-0053High
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use fields that use RFC2047 encoding, which may be interpreted differently by mail...
- 2.4%CVE-2004-0162High
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME encapsulation that uses RFC822 comment fields, which may be interpreted as other fields by mail...
- 2.4%CVE-2004-0051High
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard but frequently supported Content-Transfer-Encoding values such as...
Running Mailsweeper? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local users to execute arbitrary code via long directory or file names in an LHA archive, which triggers the overflow when testing or extracting the archive.
- Matched to
- Mailsweeper on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
We track 17 published vulnerabilities listed under the name Mailsweeper, across 16 versions.
None of Mailsweeper's vulnerabilities is on the list of flaws known to be exploited today.
Clearswift also lists Mailsweeper under more specific names, such as Mailsweeper for Smtp and Mailsweeper for Exchange. Flaws listed only under those names are counted on their own pages, not here. Open the release you run to see its own list.
Create a Precursor Intelligence account and track Mailsweeper. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.