The myMail app through 14.30 for iOS sends cleartext credentials in a situation where STARTTLS is expected by a server. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Information Disclosure
Apple
Mymail
NVD
CVSS 3.1
7.5
EPSS
0.4%