DEBIAN-CVE-2020-15685

During the plaintext phase of the STARTTLS connection setup, protocol commands could have been injected and evaluated within the encrypted session. This vulnerability affects Thunderbird 78.7...

Command injection

Synacor Zimbra Collaboration before 8.0.9 allows plaintext command injection during STARTTLS...