Medium severity6.5NVD Advisory· Published May 2, 2017· Updated May 13, 2026

CVE-2017-7440

Description

Kerio Connect 8.0.0 through 9.2.2, and Kerio Connect Client desktop application for Windows and Mac 9.2.0 through 9.2.2, when e-mail preview is enabled, allows remote attackers to conduct clickjacking attacks via a crafted e-mail message.

Affected products

Gfi/Kerio Connect
cpe:2.3:a:gfi:kerio_connect:*:*:*:*:*:*:*:*
Range: >=8.0.0,<=9.2.2
Gfi/Kerio Connect Client
cpe:2.3:a:gfi:kerio_connect_client:*:*:*:*:*:*:*:*
Range: >=9.2.0,<=9.2.2

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.gfi.com/support/products/Clickjacking-vulnerability-in-Kerio-Connect-8-and-9-CVE-2017-7440nvdPatchVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000