SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read arbitrary e-mail messages via the option1 parameter in a reply action to secmail/getmessage.exe.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.192
EPSS Ranking 95.1%