Login Request a demo
IM
Product
Imap
by Cyrus · last CVE Sep 9, 2026
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 3High 2Medium 6Low 0
Severity
All severities14Critical3High2Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Imap to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-18928
9.8
2%
Nov 15
Cyrus IMAP 2.5.x before 2.5.14 and 3.x before 3.0.12 allows privilege escalation because an HTTP request may be interpreted in the authentication context of an unrelated previous…
Affected: 2.5.0 before 2.5.14; 3.0.0 before 3.0.12
CVE-2019-11356
9.8
8%
Jun 3
The CalDAV feature in httpd in Cyrus IMAP 2.5.x through 2.5.12 and 3.0.x through 3.0.9 allows remote attackers to execute arbitrary code via a crafted HTTP PUT operation for an…
Affected: 2.5.0 through 2.5.12; 3.0.0 through 3.0.9
CVE-2017-14230
9.1
2%
Sep 10
In the mboxlist_do_find function in imap/mboxlist.c in Cyrus IMAP before 3.0.4, an off-by-one error in prefix calculation for the LIST command caused use of uninitialized memory,…
Affected: through 3.0.3
Showing 3