CVE-2009-1037: Unspecified vulnerability in the Send by e-mail module in the "Printer, e-mail and PDF versions" module 5.x...

Security readout for executives and security teams

This CVE affects a legacy Drupal module feature that can be abused to send unlimited spam through the site. The main business risk is email abuse: reputation damage, mail blocking, and operational cleanup. The source bundle does not show data theft, code execution, or active exploitation. Exposure is likely limited to Drupal sites running the affected module versions with Send by e-mail enabled. The affected inventory data in the bundle is incomplete, so confirm by checking installed Drupal modules and exact module release versions. Prioritize remediation where the affected Drupal module is internet-facing or tied to production mail infrastructure. The issue is not described as system compromise, but spam abuse can quickly affect customer trust and email deliverability. Mitigation focus: Upgrade the module to 5.x-4.4, 6.x-1.4, or later applicable vendor guidance.; Disable the Send by e-mail feature if upgrade cannot be completed quickly.; Review Drupal advisory guidance before making production changes..

Prepared

Jun 28, 2026, 11:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.