What’s Vulnerable › Vulnerabilities

CVE-2023-32290

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-05-07 · updated 2026-06-17
• Weakness: CWE-311

Description

The myMail app through 14.30 for iOS sends cleartext credentials in a situation where STARTTLS is expected by a server.

Affected products

• Vk.Company Mymail: through 14.30

References

• https://apps.apple.com/fm/app/mymail-email-app-for-gmail/id722120997
• https://mailbox.org/en/post/mailbox-org-discovers-unencrypted-password-transmission-in-mymail
• https://news.ycombinator.com/item?id=35845308
• https://apps.apple.com/fm/app/mymail-email-app-for-gmail/id722120997
• https://mailbox.org/en/post/mailbox-org-discovers-unencrypted-password-transmission-in-mymail
• https://news.ycombinator.com/item?id=35845308

Get alerted when CVE-2023-32290 or the next vulnerability affects your stack