CVE-2005-0404

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

KMail 1.7.1 in KDE 3.3.2 allows remote attackers to spoof email information, such as whether the email has been digitally signed or encrypted, via HTML formatted email.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://bugs.kde.org/show_bug.cgi?id=96020Exploit, Patch, Vendor Advisory
http://mail.kde.org/pipermail/kmail-devel/2005-February/015490.htmlVendor Advisory
http://secunia.com/advisories/14925Vendor Advisory
http://www.securiteam.com/unixfocus/5GP0B0AFFE.htmlExploit, Patch, Vendor Advisory
http://bugs.kde.org/show_bug.cgi?id=96020Exploit, Patch, Vendor Advisory
http://mail.kde.org/pipermail/kmail-devel/2005-February/015490.htmlVendor Advisory
http://secunia.com/advisories/14925Vendor Advisory
http://www.securiteam.com/unixfocus/5GP0B0AFFE.htmlExploit, Patch, Vendor Advisory

Timeline

Published: May 2, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-04065.5A design flaw in image processing software that modifies JPEG images might not modify the original EXIF thumbnail, which could lead to an in CVE-2005-04074.3Cross-site scripting (XSS) vulnerability in Openconf 1.04, and possibly other versions before 1.10, allows remote attackers to inject arbitr CVE-2005-04089.8CitrusDB 0.3.6 and earlier generates easily predictable MD5 hashes of the user name for the id_hash cookie, which allows remote attackers to CVE-2005-04096.4CitrusDB 0.3.6 and earlier does not verify authorization for the (1) importcc.php and (2) uploadcc.php, which allows remote attackers to upl CVE-2005-04105.0SQL injection vulnerability in importcc.php for CitrusDB 0.3.6 and earlier allows remote attackers to inject data via the fields of a CSV fi CVE-2005-04117.5Directory traversal vulnerability in index.php for CitrusDB 0.3.6 and earlier allows remote attackers and local users to include arbitrary P CVE-2005-04126.8Cross-site scripting (XSS) vulnerability in Spidean PostWrap allows remote attackers to inject arbitrary HTML and web script via the page pa CVE-2005-04137.5Multiple SQL injection vulnerabilities in MyPHP Forum 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the fid in forum.CVE-2005-04147.5SQL injection vulnerability in post.php for MercuryBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via a reply post ac CVE-2005-04155.0Multiple memory leaks in the MQL parser in Emdros before 1.1.22 allow remote attackers to cause a denial of service (memory consumption) via CVE-2005-04167.5The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allows remote CVE-2005-041710.0Unknown "high risk" vulnerability in DB2 Universal Database 8.1 and earlier has unknown impact and attack vectors. NOTE: due to the delayed