[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f7h0wqq0hIfMWKJxOiNyymMfR8-yv5Te_q5E7Fy2xEA4":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":38,"kevVulnerabilities":94,"topProductsByCves":95,"seoMetadata":100,"meta":109},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":37},29472,"smartertools",4,45,0,267,"2023-12-21","s",[16,21,27,32],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},154625,"smartermail",240,21,{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},154627,"smarterstats",5,17,"2017-09-30",{"id":28,"product_name":29,"version_count":20,"cve_count":30,"kev_count":11,"last_cve_update":31},154628,"smartertrack",6,"2022-03-14",{"id":33,"product_name":34,"version_count":35,"cve_count":35,"kev_count":11,"last_cve_update":36},154626,"smartermail_enterprise",1,"2008-02-21","Smartertools is a technology vendor with 4 tracked products and 45 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[39,48,54,61,65,69,75,81,86,90],{"cveId":40,"description":41,"publishedDate":42,"cvssScore":43,"cvssVersion":44,"severity":45,"isKev":46,"epssScore":47},"CVE-2019-7214","SmarterTools SmarterMail 16.x before build 6985 allows deserialization of untrusted data. An unauthenticated attacker could run commands on the server when port 17001 was remotely accessible. This port is not accessible remotely by default after applying the Build 6985 patch.","2019-04-24",9.8,"v3.0","Critical",false,0.84824,{"cveId":49,"description":50,"publishedDate":42,"cvssScore":51,"cvssVersion":44,"severity":52,"isKev":46,"epssScore":53},"CVE-2019-7213","SmarterTools SmarterMail 16.x before build 6985 allows directory traversal. An authenticated user could delete arbitrary files or could create files in new folders in arbitrary locations on the mail server. This could lead to command execution on the server for instance by putting files inside the web directories.",6.5,"Medium",0.41511,{"cveId":55,"description":56,"publishedDate":57,"cvssScore":58,"cvssVersion":59,"severity":45,"isKev":46,"epssScore":60},"CVE-2011-2148","Admin\u002FfrmSite.aspx in the SmarterTools SmarterStats 6.0 web server allows remote attackers to execute arbitrary commands via vectors involving a leading and trailing & (ampersand) character, and (1) an STTTState cookie, (2) the ctl00%24MPH%24txtAdminNewPassword_SettingText parameter, (3) the ctl00%24MPH%24txtSmarterLogDirectory parameter, (4) the ctl00%24MPH%24ucSiteSeoSearchEngineSettings%24chklistEngines_SettingCheckBox%2414 parameter, (5) the ctl00%24MPH%24ucSiteSeoSettings%24txtSeoMaxKeywords_SettingText parameter, or (6) the ctl00_MPH_grdLogLocations_HiddenLSR parameter, related to an \"OS command injection\" issue.","2011-05-20",10,"v2",0.05321,{"cveId":62,"description":63,"publishedDate":57,"cvssScore":58,"cvssVersion":59,"severity":45,"isKev":46,"epssScore":64},"CVE-2011-2158","The SmarterTools SmarterStats 6.0 web server sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving (1) Admin\u002FfrmSite.aspx, (2) Admin\u002FfrmSites.aspx, (3) Admin\u002FfrmViewReports.aspx, (4) App_Themes\u002FAboutThisFolder.txt, (5) Client\u002FfrmViewReports.aspx, (6) Temp\u002FAboutThisFolder.txt, (7) default.aspx, (8) login.aspx, or (9) certain .jpg URIs under Temp\u002F.  NOTE: it is possible that only clients, not the SmarterStats product, could be affected by this issue.",0.04384,{"cveId":66,"description":67,"publishedDate":57,"cvssScore":58,"cvssVersion":59,"severity":45,"isKev":46,"epssScore":68},"CVE-2011-2159","The SmarterTools SmarterStats 6.0 web server omits the Content-Type header for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving (1) Admin\u002FDefaults\u002FfrmDefaultSiteSettings.aspx, (2) Admin\u002FDefaults\u002FfrmServerDefaults.aspx, (3) Admin\u002FfrmReportSettings.aspx, (4) Admin\u002FfrmSite.aspx, (5) App_Themes\u002FDefault\u002FButtonBarIcons.xml, (6) App_Themes\u002FDefault\u002FSkin.xml, (7) Client\u002FfrmImportSettings.aspx, (8) Client\u002FfrmSeoSettings.aspx, (9) Services\u002FWeb.config, (10) aspnet_client\u002Fsystem_web\u002F4_0_30319\u002F, (11) clientaccesspolicy.xml, (12) cloudscan.exe, (13) crossdomain.xml, or (14) sitemap.xml.  NOTE: it is possible that only clients, not the SmarterStats product, could be affected by this issue.",0.04377,{"cveId":70,"description":71,"publishedDate":31,"cvssScore":72,"cvssVersion":73,"severity":52,"isKev":46,"epssScore":74},"CVE-2022-24384","Cross-site Scripting (XSS) vulnerability in SmarterTools SmarterTrack This issue affects: SmarterTools SmarterTrack 100.0.8019.14010.",6.1,"v3.1",0.0409,{"cveId":76,"description":77,"publishedDate":57,"cvssScore":78,"cvssVersion":59,"severity":79,"isKev":46,"epssScore":80},"CVE-2011-2155","Login.aspx in the SmarterTools SmarterStats 6.0 web server generates a ctl00$MPH$txtPassword password form field without disabling the autocomplete feature, which makes it easier for remote attackers to bypass authentication by leveraging an unattended workstation.",7.5,"High",0.03913,{"cveId":82,"description":83,"publishedDate":84,"cvssScore":24,"cvssVersion":59,"severity":52,"isKev":46,"epssScore":85},"CVE-2010-3486","Directory traversal vulnerability in FileStorageUpload.ashx in SmarterMail 7.1.3876 allows remote attackers to read arbitrary files via a (1) ..\u002F (dot dot slash), (2) %5C (encoded backslash), or (3) %255c (double-encoded backslash) in the name parameter.","2010-09-22",0.03074,{"cveId":87,"description":88,"publishedDate":57,"cvssScore":24,"cvssVersion":59,"severity":52,"isKev":46,"epssScore":89},"CVE-2011-2150","The SmarterTools SmarterStats 6.0 web server does not properly validate string data that is intended for storage in an XML document, which allows remote attackers to cause a denial of service (parsing error and daemon pause) via vectors involving (1) certain cookies in a SiteInfoLookup action to Admin\u002FfrmSites.aspx, or certain (2) cookies or (3) parameters to (a) Client\u002FfrmViewOverviewReport.aspx, (b) Client\u002FfrmViewReports.aspx, or (c) Services\u002FSiteAdmin.asmx, as demonstrated by a ]]>> string, related to an \"XML injection\" issue.",0.03024,{"cveId":91,"description":92,"publishedDate":57,"cvssScore":24,"cvssVersion":59,"severity":52,"isKev":46,"epssScore":93},"CVE-2011-2151","The (1) Admin\u002FfrmEmailReportSettings.aspx, (2) Admin\u002FfrmGeneralSettings.aspx, (3) Admin\u002FfrmSite.aspx, (4) Client\u002FfrmUser.aspx, and (5) Login.aspx components in the SmarterTools SmarterStats 6.0 web server accept cleartext passwords, which makes it easier for remote attackers to obtain sensitive information by sniffing the network.",0.02667,[],[96,97,98,99],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},{"id":28,"product_name":29,"version_count":20,"cve_count":30,"kev_count":11,"last_cve_update":31},{"id":33,"product_name":34,"version_count":35,"cve_count":35,"kev_count":11,"last_cve_update":36},{"title":101,"metaDescription":102,"keywords":103,"structuredData":104},"Smartertools - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Smartertools covering 4 products with 45 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Smartertools vulnerabilities, Smartertools security, Smartertools CVE, Smartertools threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":105,"@type":106,"name":107,"description":102,"url":108},"https:\u002F\u002Fschema.org","Organization","Smartertools","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fsmartertools",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":110,"apiVersion":111},"2026-10-30T18:40:05.507Z","3.0"]