CVE-2007-0652: Mailenable Professional

Medium severity, CVSS 5.1. EPSS: 1.6% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in MailEnable Professional before 2.37 allows remote attackers to modify arbitrary configurations and perform unauthorized actions as arbitrary users via a link or IMG tag.

Affected products

• Mailenable Mailenable Professional: version 1.0.004 only; version 1.0.005 only; version 1.0.006 only; version 1.0.007 only; version 1.0.008 only; version 1.0.009 only; …

Published 2007-02-15. Last modified 2026-06-16.