CVE-2004-2726: HTTPMail service in MailEnable Professional 1.18 does not properly handle arguments to the Authorization he...

Security readout for executives and security teams

CVE-2004-2726 is a denial-of-service flaw in the HTTPMail service of MailEnable Professional 1.18. A remote attacker could crash the service by sending malformed Authorization header input. Sources do not show data theft, code execution, a named patch, or active exploitation. Exposure is likely limited to organizations still running legacy MailEnable Professional 1.18 with HTTPMail enabled, especially if reachable from the internet. The source bundle does not prove other versions are affected. Treat as priority when MailEnable Professional 1.18 HTTPMail is exposed externally, because it can interrupt mail access. If no legacy MailEnable deployment exists, priority is low after verification. Mitigation focus: Identify any MailEnable Professional 1.18 systems.; Check MailEnable or trusted advisory guidance for fixed versions.; Disable HTTPMail if the feature is not required..

Prepared

Jun 29, 2026, 02:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.