Note This version fixes two critical security vulnerabilities in Web Access. All customer running an affected version of MailStore Service Provider Edition should update their installations as soon as possible.
Fixed Web Access: Reflected Cross-Site-Scripting (XSS) vulnerability in search function, allowing an attacker to gain access to the archive if the victim clicks on a specially-crafted link while being logged in to Web Access. Affected versions: 9.2 and newer.
Fixed Web Access: Open Redirect in Dereferrer. This allows an attacker to create specially-crafted links, which would redirect the victim to a malicious website, although the link itself seems to point to a trusted resource. Affected versions: 9.0 and newer.
MailStore Service Provider Edition 10.0.1
December 7, 2016
Fixed Upgrade process may stop unexpectedly during encryption of databases on slow disks or USB drives.
Fixed Database update does not delete MailStoreFileGroup.fdb.key from previous failed update.
MailStore Service Provider Edition 10.0
November 30, 2016
New Full encryption of databases and audit logs. In addition to the existing encryption of the email contents and sensitive data inside the databases, all databases and the internal audit log are also fully encrypted as of this version. This requires an upgrade of all archive stores. Please read the update notices carefully to learn more about the upgrade process.
New All admin activities except MessageRetrieveContent will be recorded in the audit log.
New Dashboard notification if SMTP settings have not yet been configured.
New Windows performance counter for monitoring the Firebird database connection pool.
Improved Archive Stores now support different locations for database, index and content files. This is also fully supported by the auto-create store feature.
Improved The limitations of MailStore administrators have been extended and are enabled by default for newly created archives. MailStore administrators will not be able to browse, search, or export email of other MailStore users as long as the compliance setting "Archive Access”, formerly known as "E-mail Preview”, is set to "Block Access”.
Improved Relative paths are now used internally to store the location of archive stores. This makes relocating the whole archive to a new location much easier.
Improved Synchronization of Microsoft Office 365 users that have no Exchange Online license assigned.
Improved Delete key triggers delete function when one or more emails are selected in the email list.
Improved Show a warning when a folder is renamed and a folder with the new name already exists.
Improved Automatically delete the mailbox cache file "MailboxCache.fdb" if it could not be loaded successfully.
Fixed Hyperlinks in dialogs are now clickable.
Fixed Incorrect encoding of passwords used when logging into remote IMAP server.
Fixed Export via IMAP to Tobit’s David Server fails when server sends EXPUNGE in response to APPEND command.
Fixed RTF attachments are spuriously used as email body when email is exported to MSG file.
Fixed Clicking "Help" on the login screens results in displaying an error message.
Fixed Embedded browser controls are no longer supported by Google's consent dialog. As recommended by Google, the user’s default web browser is now used to open the consent dialog.
Fixed Management API allows instance IDs to be longer than allowed by the Management Console. Instance ID is limited to 32 characters’ now, with a minimum length of three characters.
Fixed Major update of third party library, which fixes several minor issues in archiving, displaying and exporting of emails.
Changed The navigation tree item "Users and Privileges” in "Administrative Tools” has been renamed to "Users and Archives”
Changed The page "Storage > Statistics” in "Administrative Tools” has been relocated to "Users and Archives > Archives”. Additionally, it now supports the management (rename, delete, ..) of user archives.
Changed Compliance option "E-mail Preview” has been renamed to "Archive Access”.
MailStore Service Provider Edition 9.8.2
July 20, 2016
Fixed Google Apps multi mailbox archiving profile ignores delete condition.
MailStore Service Provider Edition 9.8.1
June 29, 2016
Fixed Login as normal user not possible.
MailStore Service Provider Edition 9.8
June 29, 2016
Improved Profile runs are now marked with "Has ended with warning" in "Recent Results" in case warnings were thrown internally. Until now, these warnings were only visible in the details and profile run was markes as "Successful".
Improved Slightly improved SPE Service Configuration Tool user interface.
Fixed Client: Slow rendering of search result list when searching for a recipient, if a matching email contains a large number of recipients in the emails "To" field.
Fixed Client: Large number of email recipients may cause an overlap of the message content, which prevents the user from accessing the email body.
Fixed IMAP Server: Several bug fixes that improve the compatibility with IMAP clients.
Fixed Archiving process stops and a System.UnauthorizedAccessException is thrown when archiving from a file system which contains inaccessible folders (i.e. inappropriate permissions).
Fixed Various minor bug fixes und improvements.
MailStore Service Provider Edition 9.7.1
May 4, 2016
Fixed Invalid CSS in a HTML email causes an error message and prevents the email from being displayed.
Fixed Thousand seperator missing when displaying the number of archived emails in dashboard banner.
MailStore Service Provider Edition 9.7
April 20, 2016
New New Gmail archiving profile with OAuth support and the option to automatically remove messages from the mailbox. Please refer to the update Notices for further details if you are using the Google Mail archiving profile.
Improved Client: Minor UI refresh of the dashboard.
Improved Improved translations.
Fixed When synchronizing users with Google Apps, invalid MailStore users are created if the primary email address of the user contains uppercase letters.
Fixed Syncronizing users with Google Apps is limited to 200 users per group.
Fixed Under certain circumstances BCC recipients are shown to non-admin users by mistake.
Fixed Various minor bug fixes und improvements.
MailStore Service Provider Edition 9.6
February 24, 2016
New Client: Pin to taskbar now possible on Windows 7 and newer.
New Debug log for connections to integrated IMAP server can be enabled per instance.
New Brandable default website when accessing client Client Access Server without instance ID.
New Fixed URLs for downloading client and Outlook Add-in from Client Access Server.
Improved Support for different SSL certificate thumbprint formats in group policies.
Improved Group policies allow configuration of client und Outlook Add-in language.
Improved Branding now supports changing of the favicon.
Fixed Email headers are missing when printing from Web Access or Client.
Fixed Incorrect number of deleted emails in summary when trying to delete emails from read-only IMAP folders.
Fixed Instance stops responding under certain circumstances when multiple simultaneous request are send to a LDAP based directory service.
Fixed Offering non-supported Windows authentication in login dialog of client.
Fixed Computer Name and User Agent are not shown in Active Sessions when accessing the archive via Outlook Add-in.
Fixed Mobile Web Access: jQuery and jQuery mobile updated to latest version to protect against potential security vulnerabilities.
Fixed Various minor bug fixes und improvements.
MailStore Service Provider Edition 9.5
November 11, 2015
New Official Microsoft Exchange 2016 support.
Improved Improved Exchange Autodiscover support.
Improved Client: Executing a saved search now applies search result highlighting analog to a regular search.
Improved Management Console: Opening the instance details is now possible with a single click on the corresponding list item.
Fixed Management Console: Status of Client Access Server and its TCP ports are not taken into account by CreateClientOneTimUrlForArchiveAdmin API method, which is used when accessing an instance through the Management Console.
Fixed Web Access, Outlook Add-In: Attachments having a name beginning with # cannot be opened in the webclient.
Fixed MailStore skips folders when archiving from Mozilla Thunderbird, if Thunderbird's profile path contains special characters.
Fixed Search does not use regional settings of the system to determine first day of week.
Fixed Various minor bug fixes.
MailStore Service Provider Edition 9.4.1
October 15, 2015
Fixed Web Access, Outlook Add-in: Search for custom date range returns incorrect search result.
Fixed Incorrect CSS handling when displaying HTML messages under certain circumstances.
MailStore Service Provider Edition 9.4
September 23, 2015
New Official Outlook 2016 support.
Fixed Client: Copying table content to clipboard may duplicate columns or include hidden columns.
Fixed Various minor bug fixes.
MailStore Service Provider Edition 9.3
August 12, 2015
New Official Windows 10 support.
Improved Directory Services Integration: Improved performance when creating the list of groups if a larger number of groups exists in the directory service.
Improved Server, Client and IMAP server: Removed support for insecure SSLv2 and SSLv3. Added support for TLS 1.1 and TLS 1.2.
Improved X-Final-To header is now recognized when archiving IMAP multidrop mailboxes. In particular this enhances archiving of such mailboxes from a Kerio Connect mail server.
Fixed Various minor bug fixes.
MailStore Service Provider Edition 9.2.1
June 30, 2015
Improved Improved performance when retrieving groups from Microsoft Office 365.
Fixed Synchronizing users from a Microsoft Office 365 environment with more than 100 users fails.
Fixed Web Access, Outlook Add-in: Compatibility issues with Internet Explorer 8.
Fixed Compatibility issues with .NET Framework 4.6.
Fixed Various minor bug fixes.
MailStore Service Provider Edition 9.2
June 16, 2015
New The Microsoft Office 365 directory services can now be used by MailStore for user synchronization and authentication.
Improved Web Access and the add-in for Microsoft Outlook now come with a completely rewritten message list view which makes it possible to scroll through large folder contents and search results with minimum latency.
Fixed The information displayed in reports of multi-mailbox archiving profiles is misleading under certain circumstances.
Fixed Web Access, Outlook Add-in: Saved searches cannot be opened or deleted, depending on characters used in their names and the browser used.
Fixed Some executable files are not marked as DPI aware, causing the user interface to look blurry depending on Windows version and DPI settings.
Fixed The client branding is not applied correctly if the images used do not have a resolution of 96 dpi.
Fixed Accessing Microsoft Outlook without access to the mailbox root folder causes an access violation.
Fixed Opening S/MIME messages in Outlook, restoring to Outlook and exporting to MSG/PST may fail under certain circumstances with the error message "Accessing content stream of non-leaf entities is not supported.”
Fixed Some windows in MailStore Client are displayed incorrectly when Windows has a DPI setting other than 96 dpi (100%) and/or windows are resized.
Fixed Certain Outlook messages cannot be processed by MailStore. The error "Argument is out of range of valid values.” is displayed.
Fixed The API HTTP server doesn’t use the configured server certificate. Instead, it uses the server certificate of the Management Console’s HTTP server.
Fixed Google Apps directory services synchronization may hang under certain circumstances if a large number of users or groups exists.
Fixed Indexing message bodies and attachments in HTML format is performed incorrectly under certain circumstances, causing the results of full text searches to be incomplete. Rebuild search indexes if you encounter this error.
Fixed File system archiving profiles cannot be created with drag and drop from Windows Explorer, as stated in the documentation.
Fixed Some multi-select enabled tables in MailStore Client react very slowly if a large number of items is selected.
Fixed Some multi-select enabled tables in MailStore Client don’t accept the Ctrl+A hotkey for selecting all items.
MailStore Service Provider Edition 9.1
January 20, 2015
New First class support for Google Apps (includes user database synchronization, authentication, multi-mailbox archiving using a central service account, multidrop archiving and export).
Improved Internal archive store directory traversal is now reduced to a minimum, significantly improving performance especially when using larger archives and/or storing them on network storage.
Fixed MailStore's integrated e-mail preview is now able to detect and repair invalid CSS to a certain extent.
MailStore Service Provider Edition 9.0.5
October 27, 2014
New Support for the latest Microsoft Office 365 update (Exchange Server 15.1).
MailStore Service Provider Edition 9.0.4
October 16, 2014
Fixed Archiving and Export: If a profile is run via a scheduled task or the API, the memory and/or disk space used for reports and debug logs is not released until the server process is stopped or restarted.
Fixed Archiving and Export: User interface text might be displayed in the wrong language under certain circumstances.
Fixed Archiving and Export: The CRAM-MD5 authentication mechanism does not work when accessing mailboxes with the IMAP protocol.
Fixed Archiving: MailStore is unable to archive Microsoft Exchange folders containing tabulator characters in their names.
Fixed Client, Web Access, Outlook Add-in: Messages in HTML format might be displayed incorrectly under certain circumstances.
Fixed Web Access: Windows authentication is not offered when using Internet Explorer 11.
Fixed Server: Under certain circumstances, folder names are disclosed to users without the appropriate privileges.
Fixed Server: A timeout might occur when trying to upgrade a large number of archive stores created by old versions of MailStore Server.
Improved Server: Reduced disk I/O when accessing Firebird Embedded-based database files.
Improved Various minor user interface improvements and bug fixes.
MailStore Service Provider Edition 9.0.3
July 24, 2014
Fixed Client: In 120 dpi mode, some controls do not scale correctly (message list, date ranges, folder include/exclude dialog, progress dialogs).
Fixed Client: Non-invokable commands are offered to users who have only limited archiving or export privileges (execute only or manage only). Users are getting an access denied error message only after trying to invoke those commands though.
Fixed Client: The page "Recent Results" is not visible to users who can only manage archiving and/or export profiles.
Fixed Directory Services Integration: Due to a bug in Windows' ADSI connection pool, Active Directory authentication sometimes fails when transport layer security (LDAP-SSL) is used. This version works around this bug by performing the authentication via separate LDAP connections when LDAP-SSL is configured.
Fixed Management API: The virtual time zones $UTC (Coordinated Universal Time) and $Local (Server Local Time) are not available in the GetTimeZones and GetWorkerResults API methods.
Improved Management API: An optional argument instanceUrl has been added to the CreateClientOneTimeUrlForArchiveAdmin method, allowing to specify manually specify the client access server to be used.
Improved Management Console: Various minor user interface improvements.
MailStore Service Provider Edition 9.0.2
July 14, 2014
Fixed The login page of Mobile Web Access does not show the service provider-specific branding. Instead, a MailStore logo is shown.
MailStore Service Provider Edition 9.0.1
July 8, 2014
Improved The Exchange EWS and IMAP property caches are no longer updated if the contents of a folder hasn't changed, reducing write I/O especially when continuously archiving a large number of mailboxes
Fixed Archiving large messages from the client fails when the upload of a large message to MailStore SPE takes more than 100 seconds. Error message: 'The request was aborted: The request was canceled.'
Fixed Installation of the client and the add-in for Microsoft Outlook fails on systems with .NET Framework 4.5.2 installed
Fixed The server process may cause very high CPU load when the archive consists of a very large number of archive stores
Fixed MailStore's internal lock monitor writes timeout errors to the Windows Event Log even when the timeouts were expected, e.g. to detect internal idle states
Fixed Due to a bug in some versions of Microsoft Exchange, archiving folders may fail with error messages such as 'The Delete change relates to an unknown item' or 'The ReadFlagChange change relates to an unknown item'. This version uses a different sync method that doesn't rely on the buggy SyncFolderItems operation.
Fixed If a virus was detected in one or more items of a Microsoft Exchange folder ('ErrorVirusDetected'), archiving the whole folder fails
Fixed Archiving localized (non-English) versions of Google Mail leads to multiple inbox folders with different names when upgrading from earlier MailStore versions
MailStore Service Provider Edition 9.0
July 1, 2014
Note MailStore Client now requires Windows Vista SP2, Windows 7 SP1, Windows 8 or Windows 8.1.
Note The add-in for Microsoft Outlook now requires Windows Vista SP2, Windows 7 SP1, Windows 8 or Windows 8.1. Users still running Windows XP can however use the latest 8.5 version of the add-in to connect to MailStore Service Provider Edition 9.
New Client: Entirely rewritten Message List (used for both folder contents and search results) now behaves more like the one built into Microsoft Outlook, is much faster and can easily display hundereds of thousands of messages. In order to simplify the selection of multiple messages, the last selected message is now opened in message preview.
New Client: Entirely rewritten Message Preview improves display of a large number of recipients and attachments.
New Web Access: HTML E-mail Viewer based on a secure whitelist-based HTML rewriter.
Improved Web Access: The attachment list now shows icons for the most common file types.
Improved Web Access: The message list now automatically loads new entries when the user has scrolled to its end.
New Add-in for Microsoft Outlook: HTML E-mail Viewer based on a secure whitelist-based HTML rewriter.
Improved Add-in for Microsoft Outlook: The attachment list now shows icons for the most common file types.
Improved Add-in for Microsoft Outlook: The message list now automatically loads new entries when the user has scrolled to its end.
New Server: Entirely rewritten internal lock manager significantly reduces congestions and leads to a much better overall behaviour of the system.
Changed Archiving and Export: Support for AVM KEN! has been removed.
Improved Archiving: The performance when archiving Microsoft Exchange 2007 or higher EWS-based mailboxes with a high number of already archived messages has been significantly improved thanks to a new Firebird-based MAPI property cache with an also new folder contents sync module.
Improved Archiving: The performance when archiving IMAP-based mailboxes with a high number of already archived messages has been significantly improved thanks to a new Firebird-based property cache with an also new folder contents sync module.
Improved Archiving: The performance when archiving e-mail servers, e-mails clients and e-mails files with a high number of already archived messages has been significantly improved thanks to the implementation of a new store-hinting algorithm.
Improved Archiving: E-mails which are selected for deletion are now immediately deleted from the e-mail source. Previously, they were deleted in batch after the entire folder contents has been processed.
Improved Directory Services Integration: The Kerio synchronization now supports domain aliases. Previously, only user aliases were supported.
New Management API: The API has been entirely rewritten. Please refer to the Release Notes for details.
Improved Full Text Search: Added compatibility with both Adobe Reader and the Adobe PDF IFilter to improve search in PDF attachments. The internal PDF document filter has been removed.