CVE-2004-2584: frmAddfolder.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote authenticated users to cr...

Security readout for executives and security teams

This old SmarterMail issue lets a logged-in user create a mail folder that the application cannot later rename or delete. The available sources explicitly say it is unclear whether this is a true security vulnerability, so the business risk is uncertain and likely operational rather than a clear compromise path. Exposure appears limited to organizations still running SmarterMail 1.6.1511 or 1.6.1529 with authenticated user access to folder creation. Modern deployments may be unaffected, but the source bundle does not define fixed versions or broader version ranges. Treat this as a legacy hygiene issue unless affected SmarterMail versions are present. If they are, prioritize upgrade or retirement because unsupported mail systems carry broader operational and security risk beyond this narrow CVE. Mitigation focus: Inventory SmarterMail deployments and identify any 1.6.1511 or 1.6.1529 instances.; Check SmarterTools guidance or release notes for fixed versions and supported cleanup steps.; Restrict account creation and authenticated access on legacy SmarterMail systems..

Prepared

Jun 29, 2026, 16:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.