Kerio develops a focused suite of messaging, firewall, and network-access products positioned for small to medium-sized business deployments, and despite a modest product catalog, has accumulated a durable vulnerability footprint across multiple releases. The vendor's disclosures frequently acquire public exploit code and recur around web-facing attack surfaces—particularly cross-site scripting, code injection, and improper authentication weaknesses in its mail server and personal firewall interfaces. These input-handling and authentication patterns reflect the complexity of building secure administrative consoles and mail-processing pipelines in gateway appliances intended for on-premises deployment. Defenders deploying Kerio messaging or firewall products should prioritize inventory and patching cycles, particularly for internet-exposed management interfaces; live severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Kerio over time
Signals from CVEs in this vendor scope (44 CVEs).
44 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2003-0220HIGH Buffer overflow in the administrator authentication process for Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to execute arbitrary code via a handshake pa | May 12, 2003 | 7.5 | 75 | NO | YES |
CVE-2003-0487HIGH Multiple buffer overflows in Kerio MailServer 5.6.3 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via (1) a long showuser parame | Aug 7, 2003 | 7.5 | 33 | NO | YES |
CVE-2004-1109MEDIUM The FWDRV.SYS driver in Kerio Personal Firewall 4.1.1 and earlier allows remote attackers to cause a denial of service (CPU consumption and system freeze from infinite loop) via a | Jan 10, 2005 | 5.0 | 28 | NO | YES |
CVE-2002-1434MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in the Web mail module of Kerio MailServer 5.0 allow remote attackers to execute HTML script as other users via certain URLs. | Apr 11, 2003 | 6.8 | 28 | NO | YES |
CVE-2008-0860HIGH Unspecified vulnerability in the AVG plugin in Kerio MailServer before 6.5.0 has unspecified impact via unknown remote attack vectors related to null DACLs. | Feb 21, 2008 | 10.0 | 27 | NO | NO |
CVE-2014-3857MEDIUM Multiple SQL injection vulnerabilities in Kerio Control Statistics in Kerio Control (formerly WinRoute Firewall) before 8.3.2 allow remote authenticated users to execute arbitrary | Jul 3, 2014 | 6.5 | 26 | NO | YES |
CVE-2007-3993HIGH Unspecified vulnerability in the attachment filter in Kerio MailServer before 6.4.1 has unknown impact and remote attack vectors. | Jul 25, 2007 | 10.0 | 25 | NO | NO |
CVE-2006-6131MEDIUM Untrusted search path vulnerability in (1) WSAdminServer and (2) WSWebServer in Kerio WebSTAR (4D WebSTAR Server Suite) 5.4.2 and earlier allows local users with webstar privileges | Nov 28, 2006 | 6.2 | 25 | NO | YES |
CVE-2004-2441HIGH Unspecified vulnerability in Kerio MailServer before 6.0.3 has unknown impact and unknown remote attack vectors, related to a "potential security issue." | Dec 31, 2004 | 10.0 | 25 | NO | NO |
CVE-2003-0488MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer 5.6.3 allow remote attackers to insert arbitrary web script via (1) the add_name parameter in the add_acl mo | Aug 7, 2003 | 5.1 | 25 | NO | YES |
Signals from CVEs in this vendor scope (44 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Kerio.
Media articles that mention a CVE ID that affects a product developed by Kerio — matched by CVE ID, not by vendor name.