Product
The Windows installer for Progressive Robot hMailServer versions 6.0.0 through 6.3.7 is vulnerable to improper link resolution, allowing a local authenticated user to run code as the mail server's service account or as an administrator.