CVE-2001-1188: Brian Dorricott Mailto

High severity, CVSS 7.5. EPSS: 5.6% chance of exploitation in the next 30 days.

mailto.exe in Brian Dorricott MAILTO 1.0.9 and earlier allows remote attackers to send SPAM e-mail through remote servers by modifying the sendto, email, server, subject, and resulturl hidden form fields.

Affected products

• Brian Dorricott Mailto: version 1.0.7 only; version 1.0.8 only; version 1.0.9 only

Published 2001-12-11. Last modified 2026-06-16.