VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 2, 2007· Updated Jun 16, 2026

CVE-2007-1137

CVE-2007-1137

Description

putmail.py in Putmail before 1.4 does not detect when a user attempts to use TLS with a server that does not support it, which causes putmail.py to send the username and password in plaintext while the user believes encryption is in use, and allows remote attackers to obtain sensitive information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10
  • EMule X Ray/Putmail9 versions
    cpe:2.3:a:sourceforge:putmail:.10:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:a:sourceforge:putmail:.10:*:*:*:*:*:*:*
    • cpe:2.3:a:sourceforge:putmail:1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:sourceforge:putmail:.11:*:*:*:*:*:*:*
    • cpe:2.3:a:sourceforge:putmail:1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:sourceforge:putmail:.12:*:*:*:*:*:*:*
    • cpe:2.3:a:sourceforge:putmail:1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:sourceforge:putmail:1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:sourceforge:putmail:.8:*:*:*:*:*:*:*
    • cpe:2.3:a:sourceforge:putmail:.9:*:*:*:*:*:*:*
  • Putmail/Putmailllm-fuzzy
    Range: <1.4

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.