offlineimap vulnerabilities
3 published CVEs name offlineimap among the affected products.
- Published CVEs
- 3
- Last 12 months
- 1
- Critical
- 1
- Known exploited
- 0
Critical 1High 0Medium 2Low 0Not scored 0
CVEs per yearBy the year they were published
- 20192
- 20261
Newest CVEs
- CVE-2020-37248
OfflineIMAP before 8.0.3 trusts the server with their STARTTLS capability prior to authentication, which allows STRIPTLS/man-in-the-middle attacks, taking over…
OfflineIMAP · OfflineIMAP
Medium6.5 - CVE-2010-4533
offlineimap before 6.3.4 added support for SSL server certificate validation but it is still possible to use SSL v2 protocol, which is a flawed protocol with…
offlineimap · offlineimap
Critical9.8 - CVE-2010-4532
offlineimap before 6.3.2 does not check for SSL server certificate validation when "ssl = yes" option is specified which can allow man-in-the-middle attacks.
offlineimap · offlineimap
Medium5.9