kerio kerio mailserver 6.6.2 vulnerabilities and exploits

(subscribe to this query)

Cross-site scripting (XSS) vulnerability in the Integration page in the WebMail component in Kerio MailServer 6.6.0, 6.6.1, 6.6.2, and 6.7.0 allows remote malicious users to inject arbitrary web script or HTML via an e-mail message.

Kerio Kerio Mailserver 6.6.0 Kerio Kerio Mailserver 6.7.0 Kerio Kerio Mailserver 6.6.2 Kerio Kerio Mailserver 6.6.1

Cross-site scripting (XSS) vulnerability in error413.php in Kerio MailServer prior to 6.6.2 allows remote malicious users to inject arbitrary web script or HTML via the sent parameter. NOTE: some of these details are obtained from third party information.

Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer prior to 6.6.2 allow remote malicious users to inject arbitrary web script or HTML via the (1) folder parameter to mailCompose.php or the (2) daytime parameter to calendarEdit.php. NOTE: some of these details...

The STARTTLS implementation in Kerio Connect 7.1.4 build 2985 and MailServer 6.x does not properly restrict I/O buffering, which allows man-in-the-middle malicious users to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is ...

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook