CVE-2011-1506

Technical details for CVE-2011-1506 are not publicly provided in the supplied connected documents. The available sources describe a plaintext command injection pattern but do not give Kerio Connect/MailServer product/version/root‑cause specifics here. Monitor for updates.

CVE-2008-5769

CVE-2008-5769 concerns Kerio MailServer prior to 6.6.2, with multiple cross-site scripting (XSS) vulnerabilities. The flaws allow remote attackers to inject arbitrary web script or HTML via the folder parameter to mailCompose.php or the daytime parameter to calendarEdit.php. The NVD/OpenVAS recor...

CVE-2009-2636

Kerio MailServer WebMail usion page vulnerability CVE-2009-2636 is a cross-site scripting (XSS) flaw in the WebMail integration page. Affects Kerio MailServer 6.6.0, 6.6.1, 6.6.2, and 6.7.0. Exploitation allows an attacker to inject arbitrary web script or HTML via an e-mail message, with impact...

CVE-2002-1434

CVE-2002-1434 corresponds to multiple cross-site scripting (XSS) vulnerabilities in the Web Mail module of Kerio MailServer 5.0. The collected documents specify that remote attackers could cause HTML/script execution as other users by exploiting certain URLs in the WebMail interface. The OpenVAS/...

CVE-2003-0487

Kerio MailServer 5.6.3 is affected by multiple buffer-overflow flaws that can be triggered by overly long parameters in specific modules (showuser in do_subscribe; folder in add_acl and list; user in do_map). These vulnerabilities allow remote authenticated users to cause a denial of service and,...

CVE-2006-6554

CVE-2006-6554 affects Kerio MailServer prior to 6.3.1. The issue is a denial-of-service: remote attackers can trigger a segmentation fault and service stoppage by sending certain long LDAP search queries (as demonstrated by vd_kms6.pm). What is affected: Kerio MailServer’s LDAP handling component...

CVE-2005-1063

Kerio’s CVE-2005-1063 affects Kerio WinRoute Firewall (up to 6.0.10), Kerio Personal Firewall (up to 4.1.2), and Kerio MailServer (up to 6.0.8). The issue arises from abusing the administration protocol, allowing remote attackers to cause a CPU-consuming denial of service by triggering pre-authen...

CVE-2008-0858

CVE-2008-0858 : Kerio MailServer before 6.5.0 suffers a buffer overflow in the Visnetic anti-virus plug‑in that may allow a remote attacker to execute arbitrary code via unspecified vectors. The exact exploit mechanism is not detailed in the provided documents. Affected product: Kerio MailServer;...

CVE-2005-1062

Kerio’s administration protocol in Kerio WinRoute Firewall <= 6.0.10, Kerio Personal Firewall <= 4.1.2, and Kerio MailServer

CVE-2006-1158

CVE-2006-1158 affects Kerio MailServer prior to 6.1.3 Patch 1. An unauthenticated remote attacker can trigger a denial of service (application crash) by sending a crafted IMAP LOGIN command. The issue is caused by handling of certain malformed IMAP LOGIN inputs, leading to service disruption. Pub...

CVE-2002-1433

CVE-2002-1433 affects Kerio MailServer 5.0. The vulnerability allows remote attackers to cause a denial-of-service (hang) by sending SYN packets to the supported network services. The available records (NVD/CVE listings) describe the issue and its impact as a network-based DoS, but do not provide...

CVE-2003-0488

Kerio MailServer 5.6.3 is affected by multiple XSS vulnerabilities (via add_name in add_acl and alias in do_map). OpenVAS/Nessus notes additional flaws across 5.x lines that could allow shell access or remote code execution, plus DoS in admin/login and a buffer overrun in the spam-filter path for

CVE-2008-0860

CVE-2008-0860 affects Kerio MailServer prior to 6.5.0 via the AVG plug-in, with an unspecified impact via unknown remote attack vectors related to null DACLs. The exact affected versions, root cause details, and remediation are not fully disclosed in the provided documents; exploitation status is...

CVE-2004-1023

Affected software: Kerio Winroute Firewall (<6.0.9), ServerFirewall (<1.0.1), and MailServer (

CVE-2008-5760

CVE-2008-5760 corresponds to multiple cross-site scripting vulnerabilities in Kerio MailServer prior to 6.6.2, as documented by OpenVAS entries and NVD. The XSS flaws affect the Kerio MailServer web interface, with the explicit issue noted as an XSS in error413.php via the sent parameter, contrib...

CVE-2004-1022

Kerio products Kerio WinRoute Firewall (before 6.0.7), ServerFirewall (before 1.0.1), and MailServer (before 6.0.5) store passwords using a symmetric encryption scheme. The vulnerability arises because the secret key is extractable from the software, enabling an attacker to decrypt the user datab...

CVE-2007-3993

Kerio MailServer

CVE-2005-1138

CVE-2005-1138 refers to an unknown vulnerability in the WebMail component of Kerio MailServer prior to 6.0.9 that can cause a denial of service via certain e‑mail messages. Multiple sources (NVD, CVE List, and Nessus plugin) describe it as a resource exhaustion/CPU consumption issue when malforme...

CVE-2004-2441

Kerio MailServer

CVE-2008-0859

Kerio MailServer before 6.5.0 is affected by an unspecified vulnerability in the uudecode decoding process that triggers memory corruption and can cause a denial of service. This CVE describes a remote DoS via memory corruption but does not provide specific exploit vectors, affected subcomponents...

CVE-2006-2203

CVE-2006-2203 affects Kerio MailServer prior to 6.1.4. The vulnerability is described as an unspecified issue with unknown impact and remote attack vectors related to a possible bypass of the attachment filter. No concrete root cause, impact details, exploit information, or official remediation/f...

CVE-2006-5812

CVE-2006-5812 concerns an unspecified vulnerability in Kerio MailServer that allows denial of service, demonstrated by vd_kms4.pm. The initial disclosure notes no actionable information as of 20061108, and the connected documents provide no concrete exploit details or fixes. No remediation detail...