IP
Vendor
Ipswitch
132
CVEs
0
On KEV
0
New 30D
Products
IM7.5
Imail
Ipswitch
38 CVEs0 on KEV0 new
IC–
Ipswitch Collaboration Suite
Ipswitch
13 CVEs0 on KEV0 new
WF9.8
WS Ftp Server
Ipswitch
13 CVEs0 on KEV0 new
IS9.8
Imail Server
Ipswitch
12 CVEs0 on KEV0 new
WF7.8
WS Ftp
Ipswitch
8 CVEs0 on KEV0 new
WP–
Whatsup Professional
Ipswitch
7 CVEs0 on KEV0 new
WF–
WS Ftp Pro
Ipswitch
6 CVEs0 on KEV0 new
MD9.8
Moveit Dmz
Ipswitch
5 CVEs0 on KEV0 new
IM–
Imserver
Ipswitch
3 CVEs0 on KEV0 new
IM–
Instant Messaging
Ipswitch
3 CVEs0 on KEV0 new
MM8.8
Moveit Mobile
Ipswitch
3 CVEs0 on KEV0 new
MT9.8
Moveit Transfer
Ipswitch
3 CVEs0 on KEV0 new
WH–
Whatsup
Ipswitch
3 CVEs0 on KEV0 new
IP–
Imail Plus
Ipswitch
2 CVEs0 on KEV0 new
WF–
WS Ftp Home
Ipswitch
2 CVEs0 on KEV0 new
IC–
Imail Client
Ipswitch
1 CVEs0 on KEV0 new
IE–
Imail Express
Ipswitch
1 CVEs0 on KEV0 new
IP–
Imail Premium
Ipswitch
1 CVEs0 on KEV0 new
IS–
Imail Secure Server
Ipswitch
1 CVEs0 on KEV0 new
IS–
Ipswitch Secure Server
Ipswitch
1 CVEs0 on KEV0 new
MO6.1
Moveit
Ipswitch
1 CVEs0 on KEV0 new
MT9.8
Moveit Transfer 2017
Ipswitch
1 CVEs0 on KEV0 new
TS–
Tftp Server
Ipswitch
1 CVEs0 on KEV0 new
WG–
Whatsup Gold
Ipswitch
1 CVEs0 on KEV0 new
WS–
Whatsup Small Business
Ipswitch
1 CVEs0 on KEV0 new
WL–
Wincom Lpd
Ipswitch
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2019-18465 | MT Moveit Transfer Ipswitch | 9.8 | Oct 31 | In Progress MOVEit Transfer 11.1 before 11.1.3, a vulnerability has been found that could allow an attacker to sign in without full credentials via the SSH (SFTP) interface |
| CVE-2019-18464 | MT Moveit Transfer Ipswitch | 9.8 | Oct 31 | In Progress MOVEit Transfer 10.2 before 10.2.6 (2018.3), 11.0 before 11.0.4 (2019.0.4), and 11.1 before 11.1.3 (2019.1.3), multiple SQL Injection vulnerabilities have been found… |
| CVE-2019-16383 | MT Moveit Transfer Ipswitch | 9.4 | Sep 24 | MOVEit.DMZ.WebApi.dll in Progress MOVEit Transfer 2018 SP2 before 10.2.4, 2019 before 11.0.2, and 2019.1 before 11.1.1 allows an unauthenticated attacker to gain unauthorized… |
| CVE-2019-12146 | WF WS Ftp Server Ipswitch | 9.1 | Jun 11 | A Directory Traversal issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before 8.6.1 |
| CVE-2019-12145 | WF WS Ftp Server Ipswitch | 7.5 | Jun 11 | A Directory Traversal issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before 8.6.1 |
| CVE-2019-12144 | WF WS Ftp Server Ipswitch | 9.8 | Jun 11 | An issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before 8.6.1 |
| CVE-2018-6545 | MO Moveit Ipswitch | 6.1 | Feb 2 | Ipswitch MoveIt v8.1 is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability, as demonstrated by human.aspx |
| CVE-2017-16513 | WF WS Ftp Ipswitch | 7.8 | Nov 3 | Ipswitch WS_FTP Professional before 12.6.0.3 has buffer overflows in the local search field and the backup locations field, aka WSCLT-1729 |
| CVE-2017-12639 | IS Imail Server Ipswitch | 9.8 | Oct 3 | Stack based buffer overflow in Ipswitch IMail server up to and including 12.5.5 allows remote attackers to execute arbitrary code via unspecified vectors in IMmailSrv, aka ETRE or… |
| CVE-2017-12638 | IS Imail Server Ipswitch | 9.8 | Oct 3 | Stack based buffer overflow in Ipswitch IMail server up to and including 12.5.5 allows remote attackers to execute arbitrary code via unspecified vectors in IMmailSrv, aka ETBL or… |
| CVE-2017-6195 | MD Moveit Dmz Ipswitch | 9.8 | May 18 | Ipswitch MOVEit Transfer (formerly DMZ) allows pre-authentication blind SQL injection |
| CVE-2015-7676 | MD Moveit Dmz Ipswitch | 5.4 | Apr 15 | Ipswitch MOVEit File Transfer (formerly DMZ) 8.1 and earlier, when configured to support file view on download, allows remote authenticated users to conduct cross-site scripting… |
| CVE-2015-7680 | MD Moveit Dmz Ipswitch | 5.3 | Feb 10 | Ipswitch MOVEit DMZ before 8.2 provides different error messages for authentication attempts depending on whether the user account exists, which allows remote attackers to… |
| CVE-2015-7679 | MM Moveit Mobile Ipswitch | 6.1 | Feb 10 | Cross-site scripting (XSS) vulnerability in Ipswitch MOVEit Mobile before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the query string to mobile/ |
| CVE-2015-7678 | MM Moveit Mobile Ipswitch | 8.8 | Feb 10 | Multiple cross-site request forgery (CSRF) vulnerabilities in Ipswitch MOVEit Mobile 1.2.0.962 and earlier allow remote attackers to hijack the authentication of unspecified… |
| CVE-2015-7677 | MD Moveit Dmz Ipswitch | 4.3 | Feb 10 | The MOVEitISAPI service in Ipswitch MOVEit DMZ before 8.2 provides different error messages depending on whether a FileID exists, which allows remote authenticated users to… |
| CVE-2015-7675 | MD Moveit Dmz Ipswitch | 6.5 | Feb 10 | The "Send as attachment" feature in Ipswitch MOVEit DMZ before 8.2 and MOVEit Mobile before 1.2.2 allow remote authenticated users to bypass authorization and read uploaded files… |
| CVE-2011-4722 | TS Tftp Server Ipswitch | – | Dec 28 | Directory traversal vulnerability in the TFTP Server 1.0.0.24 in Ipswitch WhatsUp Gold allows remote attackers to read arbitrary files via a |
| CVE-2014-3878 | IS Imail Server Ipswitch | – | Jun 5 | Multiple cross-site scripting (XSS) vulnerabilities in the web client interface in Ipswitch IMail Server 12.3 and 12.4, possibly before 12.4.1.15, allow remote attackers to inject… |
| CVE-2011-1430 | IM Imail Ipswitch | – | Mar 16 | The STARTTLS implementation in the server in Ipswitch IMail 11.03 and earlier does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands… |
| CVE-2009-4775 | WF WS Ftp Ipswitch | – | Apr 21 | Format string vulnerability in Ipswitch WS_FTP Professional 12 before 12.2 allows remote attackers to cause a denial of service (crash) via format string specifiers in the status… |
| CVE-2007-2795 | IM Imail Ipswitch | – | Jan 27 | Multiple buffer overflows in Ipswitch IMail before 2006.21 allow remote attackers or authenticated users to execute arbitrary code via (1) the authentication feature in… |
| CVE-2008-5693 | WF WS Ftp Ipswitch | – | Dec 19 | Ipswitch WS_FTP Server Manager 6.1.0.0 and earlier, and possibly other Ipswitch products, might allow remote attackers to read the contents of custom ASP files in WSFTPSVR/ via a… |
| CVE-2008-5692 | WF WS Ftp Ipswitch | – | Dec 19 | Ipswitch WS_FTP Server Manager before 6.1.1, and possibly other Ipswitch products, allows remote attackers to bypass authentication and read logs via a logLogout action to… |
| CVE-2008-3795 | WF WS Ftp Home Ipswitch | – | Aug 27 | Buffer overflow in Ipswitch WS_FTP Home client allows remote FTP servers to have an unknown impact via a long "message response." |
| CVE-2008-3734 | WF WS Ftp Home Ipswitch | – | Aug 20 | Format string vulnerability in Ipswitch WS_FTP Home 2007.0.0.2 and WS_FTP Professional 2007.1.0.0 allows remote FTP servers to cause a denial of service (application crash) or… |
| CVE-2008-0946 | IM Imserver Ipswitch | – | Feb 25 | Directory traversal vulnerability in the IM Server (aka IMserve or IMserver) in Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote authenticated users to create… |
| CVE-2008-0945 | IM Imserver Ipswitch | – | Feb 25 | Format string vulnerability in the logging function in the IM Server (aka IMserve or IMserver) in Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote authenticated… |
| CVE-2008-0944 | IM Instant Messaging Ipswitch | – | Feb 25 | Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote attackers to cause a denial of service (NULL dereference and application crash) via a version field containing… |
| CVE-2008-0608 | WF WS Ftp Ipswitch | – | Feb 6 | The Logging Server (ftplogsrv.exe) 7.9.14.0 and earlier in IPSwitch WS_FTP 6.1 allows remote attackers to cause a denial of service (loss of responsiveness) via a large number of… |
| CVE-2007-4345 | IC Imail Client Ipswitch | – | Oct 31 | Buffer overflow in IMail Client 9.22, as shipped with IPSwitch IMail Server 2006.22, allows remote attackers to execute arbitrary code via a long boundary parameter in a multipart… |
| CVE-2007-5094 | IM Imail Ipswitch | – | Sep 26 | Heap-based buffer overflow in iaspam.dll in the SMTP Server in Ipswitch IMail Server 8.01 through 8.11 allows remote attackers to execute arbitrary code via a set of four… |
| CVE-2007-4555 | WF WS Ftp Ipswitch | – | Aug 28 | Cross-site scripting (XSS) vulnerability in Ipswitch WS_FTP allows remote attackers to inject arbitrary web script or HTML via arguments to a valid command, which is not properly… |
| CVE-2007-3959 | IM Imserver Ipswitch | – | Jul 24 | The IM Server (aka IMserve or IMserver) 2.0.5.30 and probably earlier in Ipswitch Instant Messaging before 2.07 in Ipswitch Collaboration Suite (ICS) allows remote attackers to… |
| CVE-2007-3925 | IS Imail Server Ipswitch | – | Jul 21 | Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary code via the (1)… |
| CVE-2007-3927 | IS Imail Server Ipswitch | – | Jul 21 | Multiple buffer overflows in Ipswitch IMail Server 2006 before 2006.21 (1) allow remote attackers to execute arbitrary code via unspecified vectors in Imailsec and (2) allow… |
| CVE-2007-3926 | IS Imail Server Ipswitch | – | Jul 21 | Ipswitch IMail Server 2006 before 2006.21 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors involving an "overwritten destructor." |
| CVE-2007-3823 | WF WS Ftp Ipswitch | – | Jul 17 | The Logging Server (Logsrv.exe) in IPSwitch WS_FTP 7.5.29.0 allows remote attackers to cause a denial of service (daemon crash) by sending a crafted packet containing a long… |
| CVE-2007-2213 | WF WS Ftp Ipswitch | – | Apr 24 | Unspecified vulnerability in the Initialize function in NetscapeFTPHandler in WS_FTP Home and Professional 2007 allows remote attackers to cause a denial of service (NULL… |
| CVE-2007-1637 | IM Imail Ipswitch | – | Mar 23 | Multiple buffer overflows in the IMAILAPILib ActiveX control (IMailAPI.dll) in Ipswitch IMail Server before 2006.2 allow remote attackers to execute arbitrary code via the (1)… |
| CVE-2007-0665 | WF WS Ftp Pro Ipswitch | – | Feb 2 | Format string vulnerability in the SCP module in Ipswitch WS_FTP 2007 Professional might allow remote attackers to execute arbitrary commands via format string specifiers in the… |
| CVE-2007-0666 | WF WS Ftp Server Ipswitch | – | Feb 2 | Ipswitch WS_FTP Server 5.04 allows FTP site administrators to execute arbitrary code on the system via a long input string to the (1) iFTPAddU or (2) iFTPAddH file, or to a (3)… |
| CVE-2007-0330 | WF WS Ftp Pro Ipswitch | – | Jan 18 | Buffer overflow in wsbho2k0.dll, as used by wsftpurl.exe, in Ipswitch WS_FTP 2007 Professional allows remote attackers to cause a denial of service (application crash) and… |
| CVE-2006-5000 | WF WS Ftp Server Ipswitch | – | Sep 26 | Multiple buffer overflows in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, have unknown impact and remote authenticated attack vectors via the (1)… |
| CVE-2006-5001 | WF WS Ftp Server Ipswitch | – | Sep 26 | Unspecified vulnerability in the log analyzer in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, prevents certain sensitive information from being… |
| CVE-2006-4974 | WF WS Ftp Server Ipswitch | – | Sep 25 | Buffer overflow in Ipswitch WS_FTP Limited Edition (LE) 5.08 allows remote FTP servers to execute arbitrary code via a long response to a PASV command |
| CVE-2006-4847 | WF WS Ftp Server Ipswitch | – | Sep 19 | Multiple buffer overflows in Ipswitch WS_FTP Server 5.05 before Hotfix 1 allow remote authenticated users to execute arbitrary code via long (1) XCRC, (2) XSHA1, or (3) XMD5… |
| CVE-2006-4379 | IP Imail Plus Ipswitch | – | Sep 8 | Stack-based buffer overflow in the SMTP Daemon in Ipswitch Collaboration 2006 Suite Premium and Standard Editions, IMail, IMail Plus, and IMail Secure allows remote attackers to… |
| CVE-2006-3552 | IC Ipswitch Collaboration Suite Ipswitch | – | Jul 13 | Premium Anti-Spam in Ipswitch IMail Secure Server 2006 and Collaboration Suite 2006 Premium, when using a certain .dat file in the StarEngine /data directory from 20060630 or… |
| CVE-2006-2531 | WH Whatsup Ipswitch | – | May 22 | Ipswitch WhatsUp Professional 2006 only verifies the user's identity via HTTP headers, which allows remote attackers to spoof being a trusted console and bypass authentication by… |
| CVE-2006-2353 | WP Whatsup Professional Ipswitch | – | May 15 | NmConsole/DeviceSelection.asp in Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allows remote attackers to redirect users to other websites via the (1)… |
| CVE-2006-2351 | WP Whatsup Professional Ipswitch | – | May 15 | Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allow remote attackers to inject arbitrary web… |
| CVE-2006-2352 | WP Whatsup Professional Ipswitch | – | May 15 | Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allow remote attackers to inject arbitrary web… |
| CVE-2006-2354 | WP Whatsup Professional Ipswitch | – | May 15 | NmConsole/Login.asp in Ipswitch WhatsUp Professional 2006 and Ipswitch WhatsUp Professional 2006 Premium generates different error messages in a way that allows remote attackers… |
| CVE-2006-2355 | WP Whatsup Professional Ipswitch | – | May 15 | Ipswitch WhatsUp Professional 2006 and Ipswitch WhatsUp Professional 2006 Premium allows remote attackers to obtain full path information via 404 error messages |
| CVE-2006-2356 | WP Whatsup Professional Ipswitch | – | May 15 | NmConsole/utility/RenderMap.asp in Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allows remote attackers to obtain sensitive information about network… |
| CVE-2006-2357 | WP Whatsup Professional Ipswitch | – | May 15 | Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allows remote attackers to obtain source code for scripts via a trailing dot in a request to… |
| CVE-2006-0911 | WH Whatsup Ipswitch | – | Feb 28 | NmService.exe in Ipswitch WhatsUp Professional 2006 allows remote attackers to cause a denial of service (CPU consumption) via crafted requests to Login.asp, possibly involving… |
| CVE-2005-3526 | IC Ipswitch Collaboration Suite Ipswitch | – | Dec 31 | Buffer overflow in the IMAP daemon in Ipswitch Collaboration Suite 2006.02 and earlier allows remote authenticated users to execute arbitrary code via a long FETCH command |
| CVE-2005-1939 | WS Whatsup Small Business Ipswitch | – | Dec 31 | Directory traversal vulnerability in Ipswitch WhatsUp Small Business 2004 allows remote attackers to read arbitrary files via ".." (dot dot) sequences in a request to the Report… |
