Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

kerio kerio mailserver vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2008-5760
Cross-site scripting (XSS) vulnerability in error413.php in Kerio MailServer prior to 6.6.2 allows remote malicious users to inject arbitrary web script or HTML via the sent parameter. NOTE: some of these details are obtained from third party information.
Kerio Kerio Mailserver 6.5.2Kerio Kerio Mailserver 6.5.1Kerio Kerio Mailserver 6.3.0Kerio Kerio Mailserver 6.2.2Kerio Kerio Mailserver 6.1.3Kerio Kerio Mailserver 6.1.1Kerio Kerio Mailserver 6.0.0Kerio Kerio Mailserver 6.0.1Kerio Kerio Mailserver 5.7.5Kerio Kerio Mailserver 5.7.8Kerio Kerio Mailserver 5.6.3Kerio Kerio Mailserver 5.6.4Kerio Kerio Mailserver 6.6.0Kerio Kerio Mailserver 6.3.1 P2Kerio Kerio Mailserver 6.3.1Kerio Kerio Mailserver 6.3.1 P1Kerio Kerio Mailserver 6.1.2Kerio Kerio Mailserver 6.0.9Kerio Kerio Mailserver 6.0.2Kerio Kerio Mailserver 6.0.3Kerio Kerio Mailserver 5.7.4Kerio Kerio Mailserver 5.7.3
NA
CVE-2008-5769
Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer prior to 6.6.2 allow remote malicious users to inject arbitrary web script or HTML via the (1) folder parameter to mailCompose.php or the (2) daytime parameter to calendarEdit.php. NOTE: some of these details...
Kerio Kerio Mailserver 6.4.2Kerio Kerio MailserverKerio Kerio Mailserver 6.4.1Kerio Kerio Mailserver 6.4.0Kerio Kerio Mailserver 6.1.3 Patch 1Kerio Kerio Mailserver 6.1.4Kerio Kerio Mailserver 6.6.0Kerio Kerio Mailserver 6.3.1 P2Kerio Kerio Mailserver 6.3.1Kerio Kerio Mailserver 6.3.1 P1Kerio Kerio Mailserver 6.1.2Kerio Kerio Mailserver 6.0.9Kerio Kerio Mailserver 6.0.2Kerio Kerio Mailserver 6.0.3Kerio Kerio Mailserver 5.7.3Kerio Kerio Mailserver 5.7.6Kerio Kerio Mailserver 5.1Kerio Kerio Mailserver 6.5.0Kerio Kerio Mailserver 6.2.0Kerio Kerio Mailserver 6.2.1Kerio Kerio Mailserver 6.0.6Kerio Kerio Mailserver 6.0.7
NA
CVE-2011-1506
The STARTTLS implementation in Kerio Connect 7.1.4 build 2985 and MailServer 6.x does not properly restrict I/O buffering, which allows man-in-the-middle malicious users to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is ...
Kerio Connect 7.1.4Kerio Kerio Mailserver 6.4.0Kerio Kerio Mailserver 6.0.6Kerio Kerio Mailserver 6.4.2Kerio Kerio Mailserver 6.0.0Kerio Kerio Mailserver 6.0.1Kerio Kerio Mailserver 6.0.8Kerio Kerio Mailserver 6.1.1Kerio Kerio Mailserver 6.5.1Kerio Kerio Mailserver 6.0.10Kerio Kerio Mailserver 6.0.9Kerio Kerio Mailserver 6.0.2Kerio Kerio Mailserver 6.0.3Kerio Kerio Mailserver 6.1.2Kerio Kerio Mailserver 6.1.3Kerio Kerio Mailserver 6.5.2Kerio Kerio Mailserver 5.6.5Kerio Kerio Mailserver 5.7.2Kerio Kerio Mailserver 6.6.0Kerio Kerio Mailserver 6.5.0Kerio Kerio Mailserver 5.7.7Kerio Kerio Mailserver 6.3.1 P2
NA
CVE-2006-6554
Unspecified vulnerability in Kerio MailServer prior to 6.3.1 allows remote malicious users to cause a denial of service (segmentation fault and service stop) via certain long LDAP queries, as demonstrated by vd_kms6.pm.
Kerio Kerio Mailserver 5.0Kerio Kerio Mailserver 5.1Kerio Kerio Mailserver 5.7.10Kerio Kerio Mailserver 5.7.2Kerio Kerio Mailserver 5.7.3Kerio Kerio Mailserver 6.0Kerio Kerio Mailserver 6.0.0Kerio Kerio Mailserver 6.0.7Kerio Kerio Mailserver 6.0.8Kerio Kerio Mailserver 5.6.4Kerio Kerio Mailserver 5.6.5Kerio Kerio Mailserver 5.7.6Kerio Kerio Mailserver 5.7.7Kerio Kerio Mailserver 6.0.3Kerio Kerio Mailserver 6.0.4Kerio Kerio Mailserver 5.1.1Kerio Kerio Mailserver 5.6.3Kerio Kerio Mailserver 5.7.4Kerio Kerio Mailserver 5.7.5Kerio Kerio Mailserver 6.0.1Kerio Kerio Mailserver 6.0.2Kerio Kerio Mailserver 6.1.3 Patch 1
NA
CVE-2005-1138
Unknown vulnerability in WebMail in Kerio MailServer prior to 6.0.9 allows remote malicious users to cause a denial of service (CPU consumption) via certain e-mail messages.
Kerio Kerio Mailserver 5.0Kerio Kerio Mailserver 5.7.7Kerio Kerio Mailserver 5.7.8Kerio Kerio Mailserver 5.7.9Kerio Kerio Mailserver 6.0Kerio Kerio Mailserver 5.6.5Kerio Kerio Mailserver 5.7.0Kerio Kerio Mailserver 5.7.1Kerio Kerio Mailserver 5.7.10Kerio Kerio Mailserver 6.0.5Kerio Kerio Mailserver 5.1Kerio Kerio Mailserver 5.6.3Kerio Kerio Mailserver 5.7.3Kerio Kerio Mailserver 5.7.5Kerio Kerio Mailserver 6.0.2Kerio Kerio Mailserver 6.0.4Kerio Kerio Mailserver 5.1.1Kerio Kerio Mailserver 5.6.4Kerio Kerio Mailserver 5.7.2Kerio Kerio Mailserver 5.7.4Kerio Kerio Mailserver 5.7.6Kerio Kerio Mailserver 6.0.1
NA
CVE-2008-0859
Unspecified vulnerability in Kerio MailServer prior to 6.5.0 allows remote malicious users to cause a denial of service (crash) via unspecified vectors related to decoding of uuencoded input, which triggers memory corruption.
Kerio Kerio Mailserver 5.6.3Kerio Kerio Mailserver 5.6.4Kerio Kerio Mailserver 5.7.4Kerio Kerio Mailserver 5.7.5Kerio Kerio Mailserver 6.0.10Kerio Kerio Mailserver 6.0.2Kerio Kerio Mailserver 6.4.1Kerio Kerio Mailserver 6.4.2Kerio Kerio Mailserver 5.0Kerio Kerio Mailserver 5.1Kerio Kerio Mailserver 5.1.1Kerio Kerio Mailserver 5.7.2Kerio Kerio Mailserver 5.7.3Kerio Kerio Mailserver 6.0Kerio Kerio Mailserver 6.0.1Kerio Kerio Mailserver 6.3.1Kerio Kerio Mailserver 6.4.0Kerio Kerio Mailserver 5.7.1Kerio Kerio Mailserver 5.7.10Kerio Kerio Mailserver 5.7.8Kerio Kerio Mailserver 5.7.9Kerio Kerio Mailserver 6.0.9
NA
CVE-2006-1158
Kerio MailServer prior to 6.1.3 Patch 1 allows remote malicious users to cause a denial of service (application crash) via a crafted IMAP LOGIN command.
Kerio Kerio Mailserver 5.7.10Kerio Kerio Mailserver 5.7.2Kerio Kerio Mailserver 5.7.9Kerio Kerio Mailserver 6.0Kerio Kerio Mailserver 6.0.6Kerio Kerio Mailserver 6.0.7Kerio Kerio Mailserver 5.7.3Kerio Kerio Mailserver 5.7.4Kerio Kerio Mailserver 6.0.0Kerio Kerio Mailserver 6.0.1Kerio Kerio Mailserver 6.0.8Kerio Kerio Mailserver 6.1.3 Patch 1Kerio Kerio Mailserver 5.6.4Kerio Kerio Mailserver 5.6.5Kerio Kerio Mailserver 5.7.5Kerio Kerio Mailserver 5.7.6Kerio Kerio Mailserver 6.0.2Kerio Kerio Mailserver 6.0.3Kerio Kerio Mailserver 5.7.0Kerio Kerio Mailserver 5.7.1Kerio Kerio Mailserver 5.7.7Kerio Kerio Mailserver 5.7.8
NA
CVE-2006-2203
Unspecified vulnerability in Kerio MailServer prior to 6.1.4 has unknown impact and remote attack vectors related to a "possible bypass of attachment filter."
Kerio Kerio Mailserver 6.0.0Kerio Kerio Mailserver 6.0.8Kerio Kerio Mailserver 6.1.3 Patch 1Kerio Kerio Mailserver 6.0.4Kerio Kerio Mailserver 6.0.5Kerio Kerio Mailserver 6.0.6Kerio Kerio Mailserver 6.0.7Kerio Kerio Mailserver 6.0.1Kerio Kerio Mailserver 6.0.2Kerio Kerio Mailserver 6.0.3
NA
CVE-2009-2636
Cross-site scripting (XSS) vulnerability in the Integration page in the WebMail component in Kerio MailServer 6.6.0, 6.6.1, 6.6.2, and 6.7.0 allows remote malicious users to inject arbitrary web script or HTML via an e-mail message.
Kerio Kerio Mailserver 6.6.0Kerio Kerio Mailserver 6.7.0Kerio Kerio Mailserver 6.6.2Kerio Kerio Mailserver 6.6.1
NA
CVE-2004-2441
Unspecified vulnerability in Kerio MailServer prior to 6.0.3 has unknown impact and unknown remote attack vectors, related to a "potential security issue."
Kerio Kerio Mailserver 6.0Kerio Kerio Mailserver 6.0.1Kerio Kerio Mailserver 6.0.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook