CVE Tools
Track your stack

Kolab

3 CVEs tracked since 2007. Since Aug 2007, none of them reached CISA KEV.

Kolab CVEs per month

Aug 2007 to Apr 2010. Point at a month, or focus the strip and use the arrow keys.
Kolab CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2007-0810
2007-09null or fewer
2007-10null or fewer
2007-11null or fewer
2007-12null or fewer
2008-01null or fewer
2008-02null or fewer
2008-03null or fewer
2008-04null or fewer
2008-05null or fewer
2008-06null or fewer
2008-07null or fewer
2008-08null or fewer
2008-0910
2008-10null or fewer
2008-11null or fewer
2008-12null or fewer
2009-01null or fewer
2009-02null or fewer
2009-03null or fewer
2009-04null or fewer
2009-05null or fewer
2009-06null or fewer
2009-07null or fewer
2009-08null or fewer
2009-09null or fewer
2009-10null or fewer
2009-11null or fewer
2009-12null or fewer
2010-01null or fewer
2010-02null or fewer
2010-03null or fewer
2010-0410

Products

The products that kept showing up in Kolab's monthly top three, with their CVEs summed over those months.

  1. Kolab Server22 months
  2. Kolab Groupware Server11 month

Latest CVEs

The 6 most recently published vulnerabilities affecting Kolab.

  1. CVE-2009-4824Unspecified vulnerability in Kolab Webclient before 1.2.0 in Kolab Server before 2.2.3 allows attackers to have an unspecified impact via vectors related to an "image upload form."7.5
  2. CVE-2008-4165admin/user/create_user.php in Kolab Groupware Server 1.0.0 places a user password in an HTTP GET request, which allows local administrators, and possibly remote attackers, to obtain cleartext passw...4.0
  3. CVE-2007-4510ClamAV before 0.91.2, as used in Kolab Server 2.0 through 2.2beta1 and other products, allows remote attackers to cause a denial of service (application crash) via (1) a crafted RTF file, which tri...4.3
  4. CVE-2005-4828Kolab Server 2.0.0 and 2.0.1 does not properly handle when a large email is sent with a "." in the wrong place, which causes kolabfilter to add another ".", which might break clear-text signatures ...6.4
  5. CVE-2006-0213Kolab Server 2.0.1, 2.0.2 and development versions pre-2.1-20051215 and earlier, when authenticating users via secure SMTP, stores authentication credentials in plaintext in the postfix.log file, w...4.6
  6. CVE-2004-1997Kolab stores OpenLDAP passwords in plaintext in the slapd.conf file, which may be installed world-readable, which allows local users to gain privileges.4.6

The record

Peak rank
#143 in Sep 2008
Busiest month shown
Aug 2007, 1 CVEs
Months with a KEV entry
0 since Aug 2007
Monthly snapshots
3 since 2007
Kolab's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store