Vulnerabilities (CVE)

Filtered by vendor Earthlink Subscribe
Filtered by product Total Access
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2007-0617 1 Earthlink 1 Total Access 2024-11-21 6.8 MEDIUM N/A
The SpamBlocker.dll ActiveX control in Earthlink TotalAccess is marked "safe for scripting," which allows remote attackers to add arbitrary e-mail addresses and domains to the spam blocker whitelist via the (1) AddSenderToWhitelist and (2) AddDomainToWhitelist functions.