CVE-2012-0389

Cross-site scripting (XSS) vulnerability in ForgottenPassword.aspx in MailEnable Professional, Enterprise, and Premium 4.26 and earlier, 5.x before 5.53, and 6.x before 6.03 allows remote attackers to inject arbitrary web script or HTML via the Username parameter.

• CWE-79

• http://archives.neohapsis.com/archives/bugtraq/2012-01/0090.htmlExploit
• http://osvdb.org/78242
• http://secunia.com/advisories/47518Vendor Advisory
• http://secunia.com/advisories/47562Vendor Advisory
• http://www.exploit-db.com/exploits/18447
• http://www.mailenable.com/kb/Content/Article.asp?ID=me020567Patch, Vendor Advisory
• http://www.nerv.fi/CVE-2012-0389.txtExploit
• http://www.securityfocus.com/bid/51401Exploit
• http://www.securitytracker.com/id?1026519Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/72380
• http://archives.neohapsis.com/archives/bugtraq/2012-01/0090.htmlExploit
• http://osvdb.org/78242
• http://secunia.com/advisories/47518Vendor Advisory
• http://secunia.com/advisories/47562Vendor Advisory
• http://www.exploit-db.com/exploits/18447
• http://www.mailenable.com/kb/Content/Article.asp?ID=me020567Patch, Vendor Advisory
• http://www.nerv.fi/CVE-2012-0389.txtExploit
• http://www.securityfocus.com/bid/51401Exploit
• http://www.securitytracker.com/id?1026519Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/72380

Published

Jan 24, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-0383Memory leak in the NAT feature in Cisco IOS 12.4, 15.0, and …
• CVE-2012-0384Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE…7.2
• CVE-2012-0385The Smart Install feature in Cisco IOS 12.2, 15.0, 15.1, and…
• CVE-2012-0386The SSHv2 implementation in Cisco IOS 12.2, 12.4, 15.0, 15.1…
• CVE-2012-0387Memory leak in the HTTP Inspection Engine feature in the Zon…
• CVE-2012-0388Memory leak in the H.323 inspection feature in the Zone-Base…
• CVE-2012-0390The DTLS implementation in GnuTLS 3.0.10 and earlier execute…
• CVE-2012-0391The ExceptionDelegator component in Apache Struts before 2.2…9.8
• CVE-2012-0392The CookieInterceptor component in Apache Struts before 2.3.…
• CVE-2012-0393The ParameterInterceptor component in Apache Struts before 2…
• CVE-2012-0394The DebuggingInterceptor component in Apache Struts before 2…
• CVE-2012-0395Buffer overflow in the server in EMC NetWorker 7.5.x and 7.6…