Approved changes feed: RSS · Atom

cpe:2.3:a:kmail:kmail:1.7.1:*:*:*:*:*:*:*

part: a version: 1.7.1 update: *

VendorKmail (c7f59f97-faeb-52f3-ac8a-81ea93464025)
ProductKmail (f1514bc0-cc30-559a-999a-cb4bb2f5d7be)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/kmail purl2cpe 2026-06-01 10:11:40.013570
pkg:deb/ubuntu/kmail purl2cpe 2026-06-01 10:11:40.013572
pkg:github/kde/kmail purl2cpe 2026-06-01 10:11:40.013573
pkg:rpm/fedora/kmail purl2cpe 2026-06-01 10:11:40.013575
pkg:rpm/opensuse/kmail purl2cpe 2026-06-01 10:11:40.013576

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-2104 vulnerable 2026-06-08 04:48:58.900397 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Kamgaing Email System (kmail) 2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) d parameter to main.php, ordner parameter to (2) main.php, or (3) webdisk.php, (4) draft parameter to compose.php, or (5) m, or (6) y parameter to calendar.php.
Published: 2006-04-29T10:00:00.000Z
Updated: 2024-08-07T17:35:31.478Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0404 vulnerable 2026-06-08 04:48:12.560509 Details available
KMail 1.7.1 in KDE 3.3.2 allows remote attackers to spoof email information, such as whether the email has been digitally signed or encrypted, via HTML formatted email.
Published: 2005-04-13T04:00:00.000Z
Updated: 2024-08-07T21:13:54.229Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.