CVE-2006-2920: Sylpheed

Low severity, CVSS 2.6. EPSS: 1.4% chance of exploitation in the next 30 days.

Sylpheed-Claws before 2.2.2 and Sylpheed before 2.2.6 allow remote attackers to bypass the URI check functionality and makes it easier to conduct phishing attacks via a URI that begins with a space character.

Affected products

• Sylpheed Sylpheed: up to and including 2.2.5; version 2.0 only; version 2.0.1 only; version 2.0.2 only; version 2.0.3 only; version 2.1 only; …
• Sylpheed-Claws Sylpheed-Claws: up to and including 2.2.1; version 0.9.4 only; version 0.9.5 only; version 0.9.6 only; version 1.0.2 only

Published 2006-06-09. Last modified 2026-06-16.