CVE-2018-18631

mailboxd component in Synacor Zimbra Collaboration Suite 8.6, 8.7 before 8.7.11 Patch 7, and 8.8 before 8.8.10 Patch 2 has Persistent XSS.

• CWE-79

• https://bugzilla.zimbra.com/show_bug.cgi?id=109020Issue Tracking, Third Party Advisory
• https://wiki.zimbra.com/wiki/Zimbra_Security_AdvisoriesVendor Advisory
• https://bugzilla.zimbra.com/show_bug.cgi?id=109020Issue Tracking, Third Party Advisory
• https://wiki.zimbra.com/wiki/Zimbra_Security_AdvisoriesVendor Advisory

Published

May 29, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-18624Grafana 5.3.1 has XSS via a column style on the "Dashboard >…6.1
• CVE-2018-18625Grafana 5.3.1 has XSS via a link on the "Dashboard > All Pan…6.1
• CVE-2018-18626An issue was discovered in PHPYun V4.6. There is a vulnerabi…
• CVE-2018-18628An issue was discovered in Pippo 1.11.0. The function Serial…
• CVE-2018-18629An issue was discovered in the Keybase command-line client b…
• CVE-2018-18630A vulnerability was found in McKesson Cardiology product 13.…7.8
• CVE-2018-18635www/guis/admin/application/controllers/UserController.php in…
• CVE-2018-18636XSS exists in cgi-bin/webcm on D-link DSL-2640T routers via …
• CVE-2018-18638A command injection vulnerability in the setup API in the Ne…
• CVE-2018-18640An issue was discovered in GitLab Community and Enterprise E…
• CVE-2018-18641An issue was discovered in GitLab Community and Enterprise E…
• CVE-2018-18642An issue was discovered in GitLab Community and Enterprise E…