CVE-2010-3459

Cross-site scripting (XSS) vulnerability in the Ajax WebMail interface in AXIGEN Mail Server before 7.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

• CWE-79

• http://secunia.com/advisories/41430Vendor Advisory
• http://www.axigen.com/press/product-releases/axigen-releases-version-742_74.htmlPatch, Vendor Advisory
• http://www.osvdb.org/68026
• http://www.securityfocus.com/bid/43230Exploit
• http://www.vupen.com/english/advisories/2010/2415Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/61825
• http://secunia.com/advisories/41430Vendor Advisory
• http://www.axigen.com/press/product-releases/axigen-releases-version-742_74.htmlPatch, Vendor Advisory
• http://www.osvdb.org/68026
• http://www.securityfocus.com/bid/43230Exploit
• http://www.vupen.com/english/advisories/2010/2415Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/61825

Published

Sep 17, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-3453The WW8ListManager::WW8ListManager function in oowriter in O…
• CVE-2010-3454Multiple off-by-one errors in the WW8DopTypography::ReadFrom…
• CVE-2010-3455Cross-site scripting (XSS) vulnerability in index.php in ACh…
• CVE-2010-3456Directory traversal vulnerability in download.php in EnergyS…
• CVE-2010-3457Multiple cross-site scripting (XSS) vulnerabilities in Symph…
• CVE-2010-3458SQL injection vulnerability in lib/toolkit/events/event.sect…
• CVE-2010-3460Directory traversal vulnerability in the HTTP interface in A…
• CVE-2010-3461SQL injection vulnerability in the Publisher module in eNdon…
• CVE-2010-3462Cross-site scripting (XSS) vulnerability in backend/plugin/R…
• CVE-2010-3463Cross-site scripting (XSS) vulnerability in modules/search/s…
• CVE-2010-3464Cross-site request forgery (CSRF) vulnerability in admin/man…
• CVE-2010-3465Multiple cross-site scripting (XSS) vulnerabilities in XSE S…