CVE-2019-15054

Multiple cross-site scripting (XSS) vulnerabilities in Mailbird before 2.7.5.0 r allow remote attackers to execute arbitrary JavaScript in a privileged context via a crafted HTML mail message. This vulnerability is distinct from CVE-2015-4657.

• CWE-79

• https://startrekdude.github.io/mailbird.htmlMailing List, Third Party Advisory
• https://www.getmailbird.com/ReleaseNotes/LatestReleaseNotes.htmlRelease Notes, Vendor Advisory
• https://startrekdude.github.io/mailbird.htmlMailing List, Third Party Advisory
• https://www.getmailbird.com/ReleaseNotes/LatestReleaseNotes.htmlRelease Notes, Vendor Advisory

Published

Nov 18, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-15049An issue was discovered in Bento4 1.5.1.0. There is a heap-b…
• CVE-2019-1505Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-15050An issue was discovered in Bento4 1.5.1.0. There is a heap-b…
• CVE-2019-15051An issue was discovered in Softing uaGate (SI, MB, 840D) fir…8.8
• CVE-2019-15052The HTTP client in Gradle before 5.6 sends authentication cr…9.8
• CVE-2019-15053The "HTML Include and replace macro" plugin before 1.5.0 for…
• CVE-2019-15055MikroTik RouterOS through 6.44.5 and 6.45.x through 6.45.3 i…
• CVE-2019-15058stb_image.h (aka the stb image loader) 2.23 has a heap-based…
• CVE-2019-15059In Liberty lisPBX 2.0-4, configuration backup files can be r…7.5
• CVE-2019-1506Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-15060The traceroute function on the TP-Link TL-WR840N v4 router w…
• CVE-2019-15062An issue was discovered in Dolibarr 11.0.0-alpha. A user can…