CVE-2008-5769

CVE-2008-5769 concerns Kerio MailServer prior to 6.6.2, with multiple cross-site scripting (XSS) vulnerabilities. The flaws allow remote attackers to inject arbitrary web script or HTML via the folder parameter to mailCompose.php or the daytime parameter to calendarEdit.php. The NVD/OpenVAS recor...

CVE-2008-5760

Cross-site scripting XSS vulnerability in error413.php in Kerio MailServer before 6.6.2 allows remote attackers to inject arbitrary web script or HTML via the sent parameter. NOTE: some of these details are obtained from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in error413.php in Kerio MailServer before 6.6.2 allows remote attackers to inject arbitrary web script or HTML via the sent parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-5760

CVE-2008-5760 corresponds to multiple cross-site scripting vulnerabilities in Kerio MailServer prior to 6.6.2, as documented by OpenVAS entries and NVD. The XSS flaws affect the Kerio MailServer web interface, with the explicit issue noted as an XSS in error413.php via the sent parameter, contrib...

CVE-2008-5760

Cross-site scripting XSS vulnerability in error413.php in Kerio MailServer before 6.6.2 allows remote attackers to inject arbitrary web script or HTML via the sent parameter. NOTE: some of these details are obtained from third party information...

Kerio MailServer < 6.6.2 Multiple XSS (KSEC-2008-12-16-01)

According to its banner, the remote host is running a version of Kerio MailServer prior to 6.6.2. Multiple files in such versions are reportedly affected by cross-site scripting vulnerabilities. - The application fails to sanitize input to the parameter 'folder' of the 'mailCompose.php' script as...

Kerio MailServer < 6.6.2 (KSEC-2008-12-16-01) Multiple XSS

Binary data 4797.prm...

Kerio WebMail < 5.7.7 Multiple Vulnerabilities

Kerio MailServer is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2008 Tenable Network Security & David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Kerio WebMail v5 multiple flaws

The remote host is running version 5 of the Kerio MailServer. There are multiple flaws in this interface which may allow an attacker with a valid webmail account on this host to obtain a shell on this host or to perform a cross-site-scripting attack against this host with version prior to 5.6.4...

Design/Logic Flaw

Unspecified vulnerability in the AVG plugin in Kerio MailServer before 6.5.0 has unspecified impact via unknown remote attack vectors related to null DACLs...

CVE-2008-0860

Unspecified vulnerability in the AVG plugin in Kerio MailServer before 6.5.0 has unspecified impact via unknown remote attack vectors related to null DACLs...

CVE-2008-0858

Buffer overflow in the Visnetic anti-virus plugin in Kerio MailServer before 6.5.0 might allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2008-0859

Unspecified vulnerability in Kerio MailServer before 6.5.0 allows remote attackers to cause a denial of service crash via unspecified vectors related to decoding of uuencoded input, which triggers memory corruption...

Buffer overflow

Buffer overflow in the Visnetic anti-virus plugin in Kerio MailServer before 6.5.0 might allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2008-0859

Unspecified vulnerability in Kerio MailServer before 6.5.0 allows remote attackers to cause a denial of service crash via unspecified vectors related to decoding of uuencoded input, which triggers memory corruption...

CVE-2008-0860

Unspecified vulnerability in the AVG plugin in Kerio MailServer before 6.5.0 has unspecified impact via unknown remote attack vectors related to null DACLs...

CVE-2008-0858

CVE-2008-0858 : Kerio MailServer before 6.5.0 suffers a buffer overflow in the Visnetic anti-virus plug‑in that may allow a remote attacker to execute arbitrary code via unspecified vectors. The exact exploit mechanism is not detailed in the provided documents. Affected product: Kerio MailServer;...

CVE-2008-0860

CVE-2008-0860 affects Kerio MailServer prior to 6.5.0 via the AVG plug-in, with an unspecified impact via unknown remote attack vectors related to null DACLs. The exact affected versions, root cause details, and remediation are not fully disclosed in the provided documents; exploitation status is...

CVE-2008-0858

Buffer overflow in the Visnetic anti-virus plugin in Kerio MailServer before 6.5.0 might allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2008-0859

Kerio MailServer before 6.5.0 is affected by an unspecified vulnerability in the uudecode decoding process that triggers memory corruption and can cause a denial of service. This CVE describes a remote DoS via memory corruption but does not provide specific exploit vectors, affected subcomponents...