Login Request a demo
IM
Product
Imap
by Cyrus · last CVE Sep 9, 2026
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 3High 2Medium 6Low 0
Severity
All severities14Critical3High2Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Imap to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-18928
9.8
2%
Nov 15
Cyrus IMAP 2.5.x before 2.5.14 and 3.x before 3.0.12 allows privilege escalation because an HTTP request may be interpreted in the authentication context of an unrelated previous…
Affected: 2.5.0 before 2.5.14; 3.0.0 before 3.0.12
CVE-2019-11356
9.8
8%
Jun 3
The CalDAV feature in httpd in Cyrus IMAP 2.5.x through 2.5.12 and 3.0.x through 3.0.9 allows remote attackers to execute arbitrary code via a crafted HTTP PUT operation for an…
Affected: 2.5.0 through 2.5.12; 3.0.0 through 3.0.9
CVE-2017-14230
9.1
2%
Sep 10
In the mboxlist_do_find function in imap/mboxlist.c in Cyrus IMAP before 3.0.4, an off-by-one error in prefix calculation for the LIST command caused use of uninitialized memory,…
Affected: through 3.0.3
CVE-2021-33582
7.5
3%
Sep 1
Cyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service (multiple-minute daemon hang) via input that is mishandled during hash-table interaction
Affected: before 3.0.16; 3.2.0 before 3.2.8; 3.4.0 before 3.4.2
CVE-2026-61915
7.1
0%
Sep 9
An issue was discovered in Cyrus IMAP before 3.12.4
Affected: before 3.8.8; 3.9.0 before 3.10.4; 3.11.0 before 3.12.4
CVE-2026-61908
6.5
0%
Sep 9
An issue was discovered in Cyrus IMAP before 3.12.4
Affected: before 3.8.8; 3.9.0 before 3.10.4; 3.11.0 before 3.12.4
CVE-2019-19783
6.5
2%
Dec 16
An issue was discovered in Cyrus IMAP before 2.5.15, 3.0.x before 3.0.13, and 3.1.x through 3.1.8
Affected: 2.5.0 before 2.5.15; 3.0.0 before 3.0.13; 3.1.0 before 3.1.8
CVE-2026-61910
5.0
0%
Sep 9
An issue was discovered in Cyrus IMAP before 3.12.4
Affected: before 3.8.8; 3.9.0 before 3.10.4; 3.11.0 before 3.12.4
CVE-2026-61911
4.3
0%
Sep 9
An issue was discovered in Cyrus IMAP before 3.12.4
Affected: before 3.8.8; 3.9.0 before 3.10.4; 3.11.0 before 3.12.4
CVE-2026-61909
4.3
0%
Sep 9
An issue was discovered in Cyrus IMAP before 3.12.4
Affected: before 3.8.8; 3.9.0 before 3.10.4; 3.11.0 before 3.12.4
CVE-2021-32056
4.3
2%
May 10
Cyrus IMAP before 3.2.7, and 3.3.x and 3.4.x before 3.4.1, allows remote authenticated users to bypass intended access restrictions on server annotations and consequently cause…
Affected: before 3.2.7; 3.3.0 before 3.4.1
CVE-2015-8078
–
3%
Dec 3
Integer overflow in the index_urlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and 2.5.6 allows remote attackers to have unspecified impact via vectors related to…
Affected: 2.3.0; 2.3.1; 2.3.2; 2.3.3; 2.3.4; 2.3.5; +34 more
CVE-2015-8077
–
3%
Dec 3
Integer overflow in the index_urlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and 2.5.6 allows remote attackers to have unspecified impact via vectors related to…
Affected: 2.3.0; 2.3.1; 2.3.2; 2.3.3; 2.3.4; 2.3.5; +34 more
CVE-2015-8076
–
3%
Dec 3
The index_urlfetch function in index.c in Cyrus IMAP 2.3.x before 2.3.19, 2.4.x before 2.4.18, 2.5.x before 2.5.4 allows remote attackers to obtain sensitive information or…
Affected: 2.3.0; 2.3.1; 2.3.2; 2.3.3; 2.3.4; 2.3.5; +34 more
Showing 14