Vulnerability Database

317,182

Total vulnerabilities in the database

CVE-2005-0149

Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie.disableCookieForMailNews preference, which could allow remote attackers to bypass the user's intended privacy and security policy by using cookies in e-mail messages.

  • Published: Feb 15, 2005
  • Updated: Nov 9, 2025
  • CVE: CVE-2005-0149
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:N/I:P/A:N

No CWE or OWASP classifications available.

Software From Fixed in
mozilla / thunderbird 0.6 0.6.x
mozilla / thunderbird 0.7.2 0.7.2.x
mozilla / mozilla 1.7-alpha 1.7-alpha.x
mozilla / mozilla 1.7-rc1 1.7-rc1.x
mozilla / mozilla 1.7 1.7.x
mozilla / mozilla 1.7-beta 1.7-beta.x
mozilla / thunderbird 0.9 0.9.x
mozilla / mozilla 1.7.1 1.7.1.x
mozilla / thunderbird 0.7.3 0.7.3.x
mozilla / thunderbird 0.7 0.7.x
mozilla / mozilla 1.7.2 1.7.2.x
mozilla / mozilla 1.7-rc3 1.7-rc3.x
mozilla / thunderbird 0.7.1 0.7.1.x
mozilla / mozilla 1.7-rc2 1.7-rc2.x
mozilla / mozilla 1.7.3 1.7.3.x