CVE-2009-3749: The Web Administrator service (STEMWADM.EXE) in Websense Personal Email Manager 7.1 before Hotfix 4 and Ema...

Security readout for executives and security teams

This is a denial-of-service flaw in the Web Administrator service for specific Websense email security products. A remote network interaction can crash the administrator service, potentially disrupting management access. The sources do not describe data theft, code execution, or active exploitation. Exposure is most likely where legacy Websense Personal Email Manager 7.1 or Email Security 7.1 systems remain deployed before Hotfix 4, especially if the Web Administrator service is reachable from untrusted networks. Treat this as a legacy exposure cleanup and availability risk. Prioritize if affected systems manage business-critical email security or if the administrator service is reachable beyond trusted networks. Mitigation focus: Confirm whether affected Websense 7.1 products are still deployed.; Apply Websense Hotfix 4 or later vendor-supported remediation.; Restrict Web Administrator access to trusted management networks only..

Prepared

Jun 28, 2026, 18:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.