Launchpad.net

CVE 2005-0404

KMail 1.7.1 in KDE 3.3.2 allows remote attackers to spoof email information, such as whether the email has been digitally signed or encrypted, via HTML formatted email.

See the CVE page on Mitre.org for more details.