IM
Product
Imail
38
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch
Add Imail to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2005-2160 | 7.5 | Jul 6 | IMail stores usernames and passwords in cleartext in a cookie, which allows remote attackers to obtain sensitive information Affected: 2006 |
| CVE-2011-1430 | – | Mar 16 | The STARTTLS implementation in the server in Ipswitch IMail 11.03 and earlier does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands… Affected: through 11.03; 5.0; 5.0.5; 5.0.6; 5.0.7; 5.0.8; +34 more |
| CVE-2007-2795 | – | Jan 27 | Multiple buffer overflows in Ipswitch IMail before 2006.21 allow remote attackers or authenticated users to execute arbitrary code via (1) the authentication feature in… Affected: through 2006.2; 2006.1 |
| CVE-2007-5094 | – | Sep 26 | Heap-based buffer overflow in iaspam.dll in the SMTP Server in Ipswitch IMail Server 8.01 through 8.11 allows remote attackers to execute arbitrary code via a set of four… Affected: 8.0.3; 8.0.5; 8.1; 8.01; 8.11 |
| CVE-2007-1637 | – | Mar 23 | Multiple buffer overflows in the IMAILAPILib ActiveX control (IMailAPI.dll) in Ipswitch IMail Server before 2006.2 allow remote attackers to execute arbitrary code via the (1)… Affected: 2006 |
| CVE-2005-1256 | – | May 25 | Stack-based buffer overflow in the IMAP daemon (IMAPD32.EXE) in IMail 8.13 in Ipswitch Collaboration Suite (ICS), and other versions before IMail Server 8.2 Hotfix 2, allows… Affected: 8.13 |
| CVE-2005-1254 | – | May 25 | Stack-based buffer overflow in the IMAP server for Ipswitch IMail 8.12 and 8.13, and other versions before IMail Server 8.2 Hotfix 2, allows remote authenticated users to cause a… Affected: through server_8.2_hotfix_2; 8.12; 8.13 |
| CVE-2005-1252 | – | May 25 | Directory traversal vulnerability in the Web Calendaring server in Ipswitch Imail 8.13, and other versions before IMail Server 8.2 Hotfix 2, allows remote attackers to read… Affected: 8.13 |
| CVE-2005-1255 | – | May 25 | Multiple stack-based buffer overflows in the IMAP server in IMail 8.12 and 8.13 in Ipswitch Collaboration Suite (ICS), and other versions before IMail Server 8.2 Hotfix 2, allow… Affected: 8.12; 8.13 |
| CVE-1999-1557 | – | May 2 | Buffer overflow in the login functions in IMAP server (imapd) in Ipswitch IMail 5.0 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary… Affected: through 5.0 |
| CVE-2004-1520 | – | Dec 31 | Stack-based buffer overflow in IPSwitch IMail 8.13 allows remote authenticated users to execute arbitrary code via a long IMAP DELETE command Affected: 8.13 |
| CVE-2004-2423 | – | Dec 31 | Unknown vulnerability in the Web calendaring component of Ipswitch IMail Server before 8.13 allows remote attackers to cause a denial of service (crash) via "specific content." Affected: 5.0; 5.0.5; 5.0.6; 5.0.7; 5.0.8; 6.0; +22 more |
| CVE-2004-2422 | – | Dec 31 | Multiple features in Ipswitch IMail Server before 8.13 allow remote attackers to cause a denial of service (crash) via (1) a long sender field to the Queue Manager or (2) a long… Affected: 5.0; 5.0.5; 5.0.6; 5.0.7; 5.0.8; 6.0; +22 more |
| CVE-2004-0297 | – | Nov 23 | Buffer overflow in the Lightweight Directory Access Protocol (LDAP) daemon (iLDAP.exe 3.9.15.10) in Ipswitch IMail Server 8.03 allows remote attackers to cause a denial of service… Affected: 8.0.3; 8.0.5 |
| CVE-2002-1076 | – | Oct 4 | Buffer overflow in the Web Messaging daemon for Ipswitch IMail before 7.12 allows remote attackers to execute arbitrary code via a long HTTP GET request for HTTP/1.0 Affected: 6.1; 6.2; 6.3; 6.4; 7.0.1; 7.0.2; +6 more |
| CVE-2002-1077 | – | Oct 4 | IPSwitch IMail Web Calendaring service (iwebcal) allows remote attackers to cause a denial of service (crash) via an HTTP POST request without a Content-Length field Affected: 6.1; 6.2; 6.3; 6.4; 7.0.1; 7.0.2; +6 more |
| CVE-2002-0777 | – | Aug 12 | Buffer overflow in the LDAP component of Ipswitch IMail 7.1 and earlier allows remote attackers to execute arbitrary code via a long "bind DN" parameter Affected: 5.0; 5.0.5; 5.0.6; 5.0.7; 5.0.8; 6.0; +18 more |
| CVE-2001-1211 | – | Dec 31 | Ipswitch IMail 7.0.4 and earlier allows attackers with administrator privileges to read and modify user alias and mailing list information for other domains hosted by the same… Affected: 6.1; 6.2; 6.3; 6.4; 7.0.1; 7.0.2; +2 more |
| CVE-2001-1287 | – | Oct 12 | Buffer overflow in Web Calendar in Ipswitch IMail 7.04 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request Affected: 6.0.2; 6.0.6; 7.0.4 |
| CVE-2001-1280 | – | Oct 12 | POP3 Server for Ipswitch IMail 7.04 and earlier generates different responses to valid and invalid user names, which allows remote attackers to determine users on the system Affected: 6.0.2; 6.0.6; 7.0.4 |
| CVE-2001-1281 | – | Oct 12 | Web Messaging Server for Ipswitch IMail 7.04 and earlier allows remote authenticated users to change information for other users by modifying the olduser parameter in the "Change… Affected: 6.0.2; 6.0.6; 7.0.4 |
| CVE-2001-1282 | – | Oct 12 | Ipswitch IMail 7.04 and earlier records the physical path of attachments in an e-mail message header, which could allow remote attackers to obtain potentially sensitive… Affected: 6.0.2; 6.0.6; 7.0.4 |
| CVE-2001-1283 | – | Oct 12 | The webmail interface for Ipswitch IMail 7.04 and earlier allows remote authenticated users to cause a denial of service (crash) via a mailbox name that contains a large number of… Affected: 6.0.2; 6.0.6; 7.0.4 |
| CVE-2001-1284 | – | Oct 12 | Ipswitch IMail 7.04 and earlier uses predictable session IDs for authentication, which allows remote attackers to hijack sessions of other users Affected: 6.0.2; 6.0.6; 7.0.4 |
| CVE-2001-1285 | – | Oct 12 | Directory traversal vulnerability in readmail.cgi for Ipswitch IMail 7.04 and earlier allows remote attackers to access the mailboxes of other users via a Affected: 6.0.2; 6.0.6; 7.0.4 |
| CVE-2001-1286 | – | Oct 12 | Ipswitch IMail 7.04 and earlier stores a user's session ID in a URL, which could allow remote attackers to hijack sessions by obtaining the URL, e.g Affected: 6.0.2; 6.0.6; 7.0.4 |
| CVE-2001-0494 | – | Jun 27 | Buffer overflow in IPSwitch IMail SMTP server 6.06 and possibly prior versions allows remote attackers to execute arbitrary code via a long From: header Affected: through 6.06 |
| CVE-2001-0039 | – | Feb 16 | IPSwitch IMail 6.0.5 allows remote attackers to cause a denial of service using the SMTP AUTH command by sending a base64-encoded user password whose length is between 80 and 136… Affected: 6.0.5 |
| CVE-2000-0825 | – | Nov 14 | Ipswitch Imail 6.0 allows remote attackers to cause a denial of service via a large number of connections in which a long Host: header is sent, which causes a thread to crash Affected: 6.00 |
| CVE-2000-0780 | – | Oct 20 | The web server in IPSWITCH IMail 6.04 and earlier allows remote attackers to read and delete arbitrary files via a Affected: 5.0; 6.0; 6.1; 6.2; 6.3; 6.4 |
| CVE-2000-0301 | – | Apr 6 | Ipswitch IMAIL server 6.02 and earlier allows remote attackers to cause a denial of service via the AUTH CRAM-MD5 command Affected: 5.0; 5.0.5; 5.0.6; 5.0.7; 5.0.8; 6.0; +2 more |
| CVE-2000-0056 | – | Jan 5 | IMail IMONITOR status.cgi CGI script allows remote attackers to cause a denial of service with many calls to status.cgi Affected: 5.0.8; 6.0; 6.1 |
| CVE-1999-1497 | – | Dec 21 | Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts Affected: 5.0; 5.0.5; 5.0.6; 5.0.7; 5.0.8; 6.0 |
| CVE-2000-0019 | – | Mar 4 | IMail POP3 daemon uses weak encryption, which allows local users to read files Affected: 2006 |
| CVE-1999-1551 | – | Mar 2 | Buffer overflow in Ipswitch IMail Service 5.0 allows an attacker to cause a denial of service (crash) and possibly execute arbitrary commands via a long URL Affected: 5.0; 6.0 |
| CVE-1999-1046 | – | Mar 1 | Buffer overflow in IMonitor in IMail 5.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to port 8181 Affected: 5.0 |
| CVE-1999-1171 | – | Feb 2 | IPswitch WS_FTP allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920 Affected: 5.0 |
| CVE-1999-1170 | – | Jan 2 | IPswitch IMail allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920 Affected: 5.0 |
Showing 38