CVE-2023-40160: A.k.i Software Pmmls.exe

Low severity, CVSS 3.7. EPSS: 1% chance of exploitation in the next 30 days.

Directory traversal vulnerability exists in Mailing List Search CGI (pmmls.exe) included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerability is exploited, a remote attacker may obtain arbitrary files on the server.

Affected products

• A.k.i Software Pmmls.exe: up to and including 2.5.1.561

Published 2024-03-18. Last modified 2026-06-17.