| 216608 | Exim < 4.98.1 SQL injection | high |
| 187639 | Exim < 4.97.1 SMTP smuggling | medium |
| 183510 | Exim < 4.96.2 Multiple Vulnerabilities | high |
| 183509 | Exim < 4.96.1 Multiple Vulnerabilities | critical |
| 164374 | Exim < 4.96 DoS | high |
| 156132 | Apache Log4Shell RCE detection via callback correlation (Direct Check SMTP) | critical |
| 149260 | Exim < 4.94.2 Multiple Vulnerabilities (21Nails) | critical |
| 135311 | Exim < 4.93 Privilege Escalation vulnerability | high |
| 133717 | OpenSMTPD Critical LPE / RCE (CVE-2020-7247) | critical |
| 129470 | Exim 4.92.x < 4.92.3 Heap Buffer Overflow | critical |
| 128553 | Exim < 4.92.2 | critical |
| 128036 | Exim < 4.92.1 Input-Validation RCE | critical |
| 127100 | Exim deliver_message() Function Remote Command Execution Vulnerability (Remote) | critical |
| 125737 | Exim 4.87 < 4.92 Remote Command Execution | critical |
| 118017 | MTA Open Mail Relaying Allowed (internal) | high |
| 111549 | Sendmail Service Detection | info |
| 108659 | SMTP Host Information in NTLM SSP | info |
| 107149 | Exim < 4.90.1 Buffer Overflow RCE Vulnerability | critical |
| 104815 | Exim < 4.89.1 Use-After-Free BDAT Remote Code Execution | critical |
| 100465 | Postfix 2.x Mail Message Date Field RCE (ENTERSEED) | critical |
| 78701 | Mail Transfer Agent and Mail Delivery Agent Remote Command Execution via Shellshock | critical |
| 77970 | Qmail Remote Command Execution via Shellshock | critical |
| 77969 | Postfix Script Remote Command Execution via Shellshock | critical |
| 77055 | Exim < 4.83 Math Comparison Functions Data Insertion | medium |
| 74289 | Sendmail < 8.14.9 close-on-exec SMTP Connection Manipulation | low |
| 66586 | OpenSMTPD TLS Blocking Socket Remote DoS | medium |
| 66373 | Exim with Dovecot use_shell Command Injection | medium |
| 63135 | McAfee WebShield SMTP Unsupported | critical |
| 62734 | Exim 4.70 - 4.80 DKIM DNS Record Parsing Remote Buffer Overflow | medium |
| 17724 | Sendmail < 8.13.8 Header Processing Overflow DoS | medium |
| 56634 | GroupWise Internet Agent < 8.0.2 HP3 iCalendar TZNAME Property Heap Overflow | critical |
| 54584 | Postfix Cyrus SASL Authentication Context Data Reuse Memory Corruption (exploit) | medium |
| 54583 | Postfix Cyrus SASL Authentication Context Data Reuse Memory Corruption | medium |
| 54582 | SMTP Service Cleartext Login Permitted | low |
| 54581 | Anonymous SMTP Authentication Enabled | info |
| 54580 | SMTP Authentication Methods | info |
| 53856 | Exim < 4.76 dkim_exim_verify_finish() DKIM-Signature Header Format String | high |
| 53534 | IBM Lotus Domino iCalendar Email Address ORGANIZER:mailto Header Remote Overflow | high |
| 52611 | SMTP Service STARTTLS Plaintext Command Injection | medium |
| 51861 | Exim < 4.74 Local Privilege Escalation | medium |
| 51179 | Exim string_format Function Remote Overflow | high |
| 49284 | MailEnable SMTP Service Denial of Service Vulnerabilities (ME-10044) | medium |
| 46783 | Exim < 4.72 Multiple Vulnerabilities | medium |
| 45517 | MS10-024: Vulnerabilities in Microsoft Exchange and Windows SMTP Service Could Allow Denial of Service (981832) (uncredentialed check) | medium |
| 45019 | SpamAssassin Milter Plugin 'mlfi_envrcpt()' Remote Arbitrary Command Injection | critical |
| 43637 | Sendmail < 8.14.4 SSL Certificate NULL Character Spoofing | high |
| 42088 | SMTP Service STARTTLS Command Support | info |
| 38877 | Sendmail < 8.13.2 Mail X-Header Handling Remote Overflow | medium |
| 34347 | Postfix epoll File Descriptor Leak Local DoS | low |
| 30123 | Citadel SMTP makeuserkey Function RCPT TO Command Remote Overflow | high |
