Vulnerabilities > KDE > Kmail > 19.12.3

DATE CVE VULNERABILITY TITLE RISK
2021-08-10 CVE-2021-38373 Cleartext Transmission of Sensitive Information vulnerability in KDE Kmail 19.12.3
In KDE KMail 19.12.3 (aka 5.13.3), the SMTP STARTTLS option is not honored (and cleartext messages are sent) unless "Server requires authentication" is checked.
network
high complexity
kde CWE-319
5.3
5.3
2020-07-27 CVE-2020-15954 Cleartext Transmission of Sensitive Information vulnerability in multiple products
KDE KMail 19.12.3 (aka 5.13.3) engages in unencrypted POP3 communication during times when the UI indicates that encryption is in use.
network
low complexity
kde debian CWE-319
6.5
6.5