Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ipswitch imail server vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2005-1255
Multiple stack-based buffer overflows in the IMAP server in IMail 8.12 and 8.13 in Ipswitch Collaboration Suite (ICS), and other versions before IMail Server 8.2 Hotfix 2, allow remote malicious users to execute arbitrary code via a LOGIN command with (1) a long username argument...
Ipswitch Imail 8.12Ipswitch Imail 8.13Ipswitch Ipswitch Collaboration SuiteIpswitch Imail Server
7.2
CVSSv2
CVE-1999-1497
Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local malicious users to read passwords for e-mail accounts.
Ipswitch Imail 5.0.8Ipswitch Imail 6.0Ipswitch Imail 5.0Ipswitch Imail 5.0.6Ipswitch Imail 5.0.5Ipswitch Imail 5.0.7
7.5
CVSSv2
CVE-2007-5094
Heap-based buffer overflow in iaspam.dll in the SMTP Server in Ipswitch IMail Server 8.01 up to and including 8.11 allows remote malicious users to execute arbitrary code via a set of four different e-mail messages with a long boundary parameter in a certain malformed Content-Typ...
Ipswitch Imail 8.11Ipswitch Imail 8.01Ipswitch Imail 8.1Ipswitch Imail 8.0.3Ipswitch Imail 8.0.5
5
CVSSv2
CVE-2004-2423
Unknown vulnerability in the Web calendaring component of Ipswitch IMail Server prior to 8.13 allows remote malicious users to cause a denial of service (crash) via "specific content."
Ipswitch Imail 5.0.6Ipswitch Imail 5.0.7Ipswitch Imail 6.0.6Ipswitch Imail 6.1Ipswitch Imail 7.0.4Ipswitch Imail 7.0.5Ipswitch Imail 8.1Ipswitch Imail 5.0.8Ipswitch Imail 6.0Ipswitch Imail 6.2Ipswitch Imail 6.3Ipswitch Imail 7.0.6Ipswitch Imail 7.0.7Ipswitch Imail 6.0.1Ipswitch Imail 6.0.2Ipswitch Imail 6.4Ipswitch Imail 7.0.1Ipswitch Imail 7.1Ipswitch Imail 7.12Ipswitch Imail 5.0Ipswitch Imail 5.0.5Ipswitch Imail 6.0.3
5
CVSSv2
CVE-2004-2422
Multiple features in Ipswitch IMail Server prior to 8.13 allow remote malicious users to cause a denial of service (crash) via (1) a long sender field to the Queue Manager or (2) a long To field to the Web Messaging component.
Ipswitch Imail 6.0.1Ipswitch Imail 6.0.2Ipswitch Imail 6.3Ipswitch Imail 6.4Ipswitch Imail 7.0.1Ipswitch Imail 7.1Ipswitch Imail 7.12Ipswitch Imail 5.0Ipswitch Imail 5.0.5Ipswitch Imail 6.0.3Ipswitch Imail 6.0.4Ipswitch Imail 7.0.2Ipswitch Imail 7.0.3Ipswitch Imail 8.0.3Ipswitch Imail 8.0.5Ipswitch Imail 5.0.6Ipswitch Imail 5.0.7Ipswitch Imail 6.0.5Ipswitch Imail 6.0.6Ipswitch Imail 7.0.4Ipswitch Imail 7.0.5Ipswitch Imail 8.1
6.8
CVSSv2
CVE-2011-1430
The STARTTLS implementation in the server in Ipswitch IMail 11.03 and previous versions does not properly restrict I/O buffering, which allows man-in-the-middle malicious users to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after ...
Ipswitch Imail 8.22Ipswitch Imail 8.11Ipswitch Imail 6.1Ipswitch Imail 6.0.2Ipswitch Imail 6.0Ipswitch Imail 6.0.1Ipswitch Imail 7.0.5Ipswitch Imail 7.0.2Ipswitch Imail 7.0.3Ipswitch Imail 8.0.3Ipswitch Imail 8.0.5Ipswitch Imail 11Ipswitch Imail 10.02Ipswitch Imail 6.00Ipswitch Imail 6.06Ipswitch Imail 2006.1Ipswitch Imail 5.0.8Ipswitch Imail 5.0.5Ipswitch Imail 7.0.4Ipswitch Imail 8.1Ipswitch Imail 8.12Ipswitch Imail 11.02
10
CVSSv2
CVE-2005-1256
Stack-based buffer overflow in the IMAP daemon (IMAPD32.EXE) in IMail 8.13 in Ipswitch Collaboration Suite (ICS), and other versions before IMail Server 8.2 Hotfix 2, allows remote authenticated users to execute arbitrary code via a STATUS command with a long mailbox name.
Ipswitch Imail 8.13Ipswitch Ipswitch Collaboration SuiteIpswitch Imail Server
5
CVSSv2
CVE-2005-1252
Directory traversal vulnerability in the Web Calendaring server in Ipswitch Imail 8.13, and other versions before IMail Server 8.2 Hotfix 2, allows remote malicious users to read arbitrary files via "..\" (dot dot backslash) sequences in the query string argument in a G...
Ipswitch Imail 8.13Ipswitch Imail Server
4.3
CVSSv2
CVE-2014-3878
Multiple cross-site scripting (XSS) vulnerabilities in the web client interface in Ipswitch IMail Server 12.3 and 12.4, possibly prior to 12.4.1.15, allow remote malicious users to inject arbitrary web script or HTML via (1) the Name field in an add new contact action in the Cont...
Ipswitch Imail Server 12.3Ipswitch Imail Server 12.4
5
CVSSv2
CVE-2000-0301
Ipswitch IMAIL server 6.02 and previous versions allows remote malicious users to cause a denial of service via the AUTH CRAM-MD5 command.
Ipswitch Imail 5.0.6Ipswitch Imail 5.0.7Ipswitch Imail 5.0.8Ipswitch Imail 6.0Ipswitch Imail 6.1Ipswitch Imail 6.2Ipswitch Imail 5.0Ipswitch Imail 5.0.5
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook