Cross-site scripting (XSS) vulnerability in ForgottenPassword.aspx in MailEnable Professional, Enterprise, and Premium 4.26 and earlier, 5.…

1. 2012-01-12 First public exploit (EDB-36547)
2. 2012-01-24 Published

8.12% chance of exploitation in the next 30 days, higher than 94% of all scored CVEs (FIRST EPSS, 2026-11-09).

• EDB-36547 MailEnable 6.02 - 'ForgottonPassword.aspx' Cross-Site Scripting webapps, 2012-01-12
• EDB-18447 MailEnable Webmail - Cross-Site Scripting webapps, 2012-01-13
• securitytracker.com http://www.securitytracker.com/id?1026519 referenced PoC, tagged "exploit" by a source, unverified
• securityfocus.com http://www.securityfocus.com/bid/51401 referenced PoC, tagged "exploit" by a source, unverified
• archives.neohapsis.com http://archives.neohapsis.com/archives/bugtraq/2012-01/0090.html referenced PoC, tagged "exploit" by a source, unverified
• nerv.fi http://www.nerv.fi/CVE-2012-0389.txt referenced PoC, tagged "exploit" by a source, unverified

Weakness

• CWE-79 Improper Neutralization of Input During Web Page Generation

• mailenable.com /kb/Content/Article.asp?ID=me020567

  patch, vendor-advisory

• exploit-db.com /exploits/18447

  exploit

• securitytracker.com /id?1026519

  vdb-entry, exploit

• securityfocus.com /bid/51401

  vdb-entry, exploit

• archives.neohapsis.com /archives/bugtraq/2012-01/0090.html

  mailing-list, exploit

• nerv.fi /CVE-2012-0389.txt

  exploit

• secunia.com /advisories/47518

  third-party-advisory, vendor-advisory

• secunia.com /advisories/47562

  third-party-advisory, vendor-advisory

• osvdb.org /78242

  vdb-entry

• exchange.xforce.ibmcloud.com /vulnerabilities/72380

  vdb-entry

• CVE List CVE-2012-0389
• NVD CVE-2012-0389

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.