Approved changes feed: RSS · Atom

cpe:2.3:a:sourceforge:putmail:1.2:*:*:*:*:*:*:*

part: a version: 1.2 update: *

VendorSourceforge (f6f3b515-d441-5dd2-b323-a578719a1725)
ProductPutmail (797fe2ce-a236-5f34-9c45-3c986a2489e1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:sourceforge/putmail purl2cpe 2026-06-01 10:14:43.985709

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-1137 vulnerable 2026-06-03 14:28:04.465558 Details available
putmail.py in Putmail before 1.4 does not detect when a user attempts to use TLS with a server that does not support it, which causes putmail.py to send the username and password in plaintext while the user believes encryption is in use, and allows remote attackers to obtain sensitive information.
Published: 2007-02-27T18:00:00.000Z
Updated: 2024-08-07T12:43:22.608Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.