| Package | Affected versions | Patched versions |
|---|---|---|
| hmailserver | = 5.6.9= 5.8.6 |
Use of hardcoded cryptographic key in BlowFish.cpp in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords used in database connections from hMailServer.ini config file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free