Unrated severityNVD Advisory· Published Jul 28, 2009· Updated Apr 23, 2026
CVE-2009-2636
CVE-2009-2636
Description
Cross-site scripting (XSS) vulnerability in the Integration page in the WebMail component in Kerio MailServer 6.6.0, 6.6.1, 6.6.2, and 6.7.0 allows remote attackers to inject arbitrary web script or HTML via an e-mail message.
Affected products
4cpe:2.3:a:kerio:kerio_mailserver:6.6.0:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:kerio:kerio_mailserver:6.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:kerio:kerio_mailserver:6.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:kerio:kerio_mailserver:6.6.2:*:*:*:*:*:*:*
- cpe:2.3:a:kerio:kerio_mailserver:6.7.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- www.securityfocus.com/bid/35264nvdPatch
- www.securitytracker.com/idnvdPatch
- secunia.com/advisories/35392nvdVendor Advisory
- www.kerio.com/support/security-advisoriesnvdVendor Advisory
- osvdb.org/54928nvd
News mentions
0No linked articles in our index yet.