CVE-2007-1137

Putmail before 1.4 is vulnerable to a TLS mis-detection where a server does not support TLS, causing the client to send the username and password in plaintext while the user believes encryption is in use. This leads to potential remote disclosure of credentials. The provided documents confirm the...