IP
Vendor
Ipswitch
26 products with CVEs on record
132
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2019-18465
MT
Moveit Transfer
Ipswitch
9.8
1%
Oct 31In Progress MOVEit Transfer 11.1 before 11.1.3, a vulnerability has been found that could allow an attacker to sign in without full credentials via the SSH (SFTP) interface
CVE-2019-18464
MT
Moveit Transfer
Ipswitch
9.8
2%
Oct 31In Progress MOVEit Transfer 10.2 before 10.2.6 (2018.3), 11.0 before 11.0.4 (2019.0.4), and 11.1 before 11.1.3 (2019.1.3), multiple SQL Injection vulnerabilities have been found…
CVE-2019-16383
MT
Moveit Transfer
Ipswitch
9.4
5%
Sep 24MOVEit.DMZ.WebApi.dll in Progress MOVEit Transfer 2018 SP2 before 10.2.4, 2019 before 11.0.2, and 2019.1 before 11.1.1 allows an unauthenticated attacker to gain unauthorized…
CVE-2019-12146
WF
WS Ftp Server
Ipswitch
9.1
4%
Jun 11A Directory Traversal issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before 8.6.1
CVE-2019-12145
WF
WS Ftp Server
Ipswitch
7.5
5%
Jun 11A Directory Traversal issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before 8.6.1
CVE-2019-12144
WF
WS Ftp Server
Ipswitch
9.8
3%
Jun 11An issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before 8.6.1
CVE-2018-6545
MO
Moveit
Ipswitch
6.1
2%
Feb 2Ipswitch MoveIt v8.1 is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability, as demonstrated by human.aspx
CVE-2017-16513
WF
WS Ftp
Ipswitch
7.8
2%
Nov 3Ipswitch WS_FTP Professional before 12.6.0.3 has buffer overflows in the local search field and the backup locations field, aka WSCLT-1729
CVE-2017-12639
IS
Imail Server
Ipswitch
9.8
3%
Oct 3Stack based buffer overflow in Ipswitch IMail server up to and including 12.5.5 allows remote attackers to execute arbitrary code via unspecified vectors in IMmailSrv, aka ETRE or…
CVE-2017-12638
IS
Imail Server
Ipswitch
9.8
3%
Oct 3Stack based buffer overflow in Ipswitch IMail server up to and including 12.5.5 allows remote attackers to execute arbitrary code via unspecified vectors in IMmailSrv, aka ETBL or…
CVE-2017-6195
MD
Moveit Dmz
Ipswitch
9.8
2%
May 18Ipswitch MOVEit Transfer (formerly DMZ) allows pre-authentication blind SQL injection
CVE-2015-7676
MD
Moveit Dmz
Ipswitch
5.4
2%
Apr 15Ipswitch MOVEit File Transfer (formerly DMZ) 8.1 and earlier, when configured to support file view on download, allows remote authenticated users to conduct cross-site scripting…
CVE-2015-7680
MD
Moveit Dmz
Ipswitch
5.3
2%
Feb 10Ipswitch MOVEit DMZ before 8.2 provides different error messages for authentication attempts depending on whether the user account exists, which allows remote attackers to…
CVE-2015-7679
MM
Moveit Mobile
Ipswitch
6.1
1%
Feb 10Cross-site scripting (XSS) vulnerability in Ipswitch MOVEit Mobile before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the query string to mobile/
CVE-2015-7678
MM
Moveit Mobile
Ipswitch
8.8
1%
Feb 10Multiple cross-site request forgery (CSRF) vulnerabilities in Ipswitch MOVEit Mobile 1.2.0.962 and earlier allow remote attackers to hijack the authentication of unspecified…
CVE-2015-7677
MD
Moveit Dmz
Ipswitch
4.3
3%
Feb 10The MOVEitISAPI service in Ipswitch MOVEit DMZ before 8.2 provides different error messages depending on whether a FileID exists, which allows remote authenticated users to…
CVE-2015-7675
MD
Moveit Dmz
Ipswitch
6.5
3%
Feb 10The "Send as attachment" feature in Ipswitch MOVEit DMZ before 8.2 and MOVEit Mobile before 1.2.2 allow remote authenticated users to bypass authorization and read uploaded files…
CVE-2011-4722
TS
Tftp Server
Ipswitch
–
58%
Dec 28Directory traversal vulnerability in the TFTP Server 1.0.0.24 in Ipswitch WhatsUp Gold allows remote attackers to read arbitrary files via a
CVE-2014-3878
IS
Imail Server
Ipswitch
–
3%
Jun 5Multiple cross-site scripting (XSS) vulnerabilities in the web client interface in Ipswitch IMail Server 12.3 and 12.4, possibly before 12.4.1.15, allow remote attackers to inject…
CVE-2011-1430
IM
Imail
Ipswitch
–
3%
Mar 16The STARTTLS implementation in the server in Ipswitch IMail 11.03 and earlier does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands…
CVE-2009-4775
WF
WS Ftp
Ipswitch
–
6%
Apr 21Format string vulnerability in Ipswitch WS_FTP Professional 12 before 12.2 allows remote attackers to cause a denial of service (crash) via format string specifiers in the status…
CVE-2007-2795
IM
Imail
Ipswitch
–
24%
Jan 27Multiple buffer overflows in Ipswitch IMail before 2006.21 allow remote attackers or authenticated users to execute arbitrary code via (1) the authentication feature in…
CVE-2008-5693
WF
WS Ftp
Ipswitch
–
5%
Dec 19Ipswitch WS_FTP Server Manager 6.1.0.0 and earlier, and possibly other Ipswitch products, might allow remote attackers to read the contents of custom ASP files in WSFTPSVR/ via a…
CVE-2008-5692
WF
WS Ftp
Ipswitch
–
13%
Dec 19Ipswitch WS_FTP Server Manager before 6.1.1, and possibly other Ipswitch products, allows remote attackers to bypass authentication and read logs via a logLogout action to…
CVE-2008-3795
WF
WS Ftp Home
Ipswitch
–
15%
Aug 27Buffer overflow in Ipswitch WS_FTP Home client allows remote FTP servers to have an unknown impact via a long "message response."
CVE-2008-3734
WF
WS Ftp Home
Ipswitch
–
14%
Aug 20Format string vulnerability in Ipswitch WS_FTP Home 2007.0.0.2 and WS_FTP Professional 2007.1.0.0 allows remote FTP servers to cause a denial of service (application crash) or…
CVE-2008-0946
IM
Imserver
Ipswitch
–
4%
Feb 25Directory traversal vulnerability in the IM Server (aka IMserve or IMserver) in Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote authenticated users to create…
CVE-2008-0945
IM
Imserver
Ipswitch
–
7%
Feb 25Format string vulnerability in the logging function in the IM Server (aka IMserve or IMserver) in Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote authenticated…
CVE-2008-0944
IM
Instant Messaging
Ipswitch
–
12%
Feb 25Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote attackers to cause a denial of service (NULL dereference and application crash) via a version field containing…
CVE-2008-0608
WF
WS Ftp
Ipswitch
–
6%
Feb 6The Logging Server (ftplogsrv.exe) 7.9.14.0 and earlier in IPSwitch WS_FTP 6.1 allows remote attackers to cause a denial of service (loss of responsiveness) via a large number of…
CVE-2007-4345
IC
Imail Client
Ipswitch
–
3%
Oct 31Buffer overflow in IMail Client 9.22, as shipped with IPSwitch IMail Server 2006.22, allows remote attackers to execute arbitrary code via a long boundary parameter in a multipart…
CVE-2007-5094
IM
Imail
Ipswitch
–
4%
Sep 26Heap-based buffer overflow in iaspam.dll in the SMTP Server in Ipswitch IMail Server 8.01 through 8.11 allows remote attackers to execute arbitrary code via a set of four…
CVE-2007-4555
WF
WS Ftp
Ipswitch
–
2%
Aug 28Cross-site scripting (XSS) vulnerability in Ipswitch WS_FTP allows remote attackers to inject arbitrary web script or HTML via arguments to a valid command, which is not properly…
CVE-2007-3959
IM
Imserver
Ipswitch
–
6%
Jul 24The IM Server (aka IMserve or IMserver) 2.0.5.30 and probably earlier in Ipswitch Instant Messaging before 2.07 in Ipswitch Collaboration Suite (ICS) allows remote attackers to…
CVE-2007-3925
IS
Imail Server
Ipswitch
–
85%
Jul 21Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary code via the (1)…
CVE-2007-3927
IS
Imail Server
Ipswitch
–
22%
Jul 21Multiple buffer overflows in Ipswitch IMail Server 2006 before 2006.21 (1) allow remote attackers to execute arbitrary code via unspecified vectors in Imailsec and (2) allow…
CVE-2007-3926
IS
Imail Server
Ipswitch
–
3%
Jul 21Ipswitch IMail Server 2006 before 2006.21 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors involving an "overwritten destructor."
CVE-2007-3823
WF
WS Ftp
Ipswitch
–
25%
Jul 17The Logging Server (Logsrv.exe) in IPSwitch WS_FTP 7.5.29.0 allows remote attackers to cause a denial of service (daemon crash) by sending a crafted packet containing a long…
CVE-2007-2213
WF
WS Ftp
Ipswitch
–
5%
Apr 24Unspecified vulnerability in the Initialize function in NetscapeFTPHandler in WS_FTP Home and Professional 2007 allows remote attackers to cause a denial of service (NULL…
CVE-2007-1637
IM
Imail
Ipswitch
–
6%
Mar 23Multiple buffer overflows in the IMAILAPILib ActiveX control (IMailAPI.dll) in Ipswitch IMail Server before 2006.2 allow remote attackers to execute arbitrary code via the (1)…
CVE-2007-0665
WF
WS Ftp Pro
Ipswitch
–
3%
Feb 2Format string vulnerability in the SCP module in Ipswitch WS_FTP 2007 Professional might allow remote attackers to execute arbitrary commands via format string specifiers in the…
CVE-2007-0666
WF
WS Ftp Server
Ipswitch
–
2%
Feb 2Ipswitch WS_FTP Server 5.04 allows FTP site administrators to execute arbitrary code on the system via a long input string to the (1) iFTPAddU or (2) iFTPAddH file, or to a (3)…
CVE-2007-0330
WF
WS Ftp Pro
Ipswitch
–
3%
Jan 18Buffer overflow in wsbho2k0.dll, as used by wsftpurl.exe, in Ipswitch WS_FTP 2007 Professional allows remote attackers to cause a denial of service (application crash) and…
CVE-2006-5000
WF
WS Ftp Server
Ipswitch
–
64%
Sep 26Multiple buffer overflows in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, have unknown impact and remote authenticated attack vectors via the (1)…
CVE-2006-5001
WF
WS Ftp Server
Ipswitch
–
32%
Sep 26Unspecified vulnerability in the log analyzer in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, prevents certain sensitive information from being…
CVE-2006-4974
WF
WS Ftp Server
Ipswitch
–
4%
Sep 25Buffer overflow in Ipswitch WS_FTP Limited Edition (LE) 5.08 allows remote FTP servers to execute arbitrary code via a long response to a PASV command
CVE-2006-4847
WF
WS Ftp Server
Ipswitch
–
86%
Sep 19Multiple buffer overflows in Ipswitch WS_FTP Server 5.05 before Hotfix 1 allow remote authenticated users to execute arbitrary code via long (1) XCRC, (2) XSHA1, or (3) XMD5…
CVE-2006-4379
IP
Imail Plus
Ipswitch
–
61%
Sep 8Stack-based buffer overflow in the SMTP Daemon in Ipswitch Collaboration 2006 Suite Premium and Standard Editions, IMail, IMail Plus, and IMail Secure allows remote attackers to…
CVE-2006-3552
IC
Ipswitch Collaboration Suite
Ipswitch
–
2%
Jul 13Premium Anti-Spam in Ipswitch IMail Secure Server 2006 and Collaboration Suite 2006 Premium, when using a certain .dat file in the StarEngine /data directory from 20060630 or…
CVE-2006-2531
WH
Whatsup
Ipswitch
–
7%
May 22Ipswitch WhatsUp Professional 2006 only verifies the user's identity via HTTP headers, which allows remote attackers to spoof being a trusted console and bypass authentication by…
CVE-2006-2353
WP
Whatsup Professional
Ipswitch
–
3%
May 15NmConsole/DeviceSelection.asp in Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allows remote attackers to redirect users to other websites via the (1)…
CVE-2006-2351
WP
Whatsup Professional
Ipswitch
–
5%
May 15Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allow remote attackers to inject arbitrary web…
CVE-2006-2352
WP
Whatsup Professional
Ipswitch
–
3%
May 15Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allow remote attackers to inject arbitrary web…
CVE-2006-2354
WP
Whatsup Professional
Ipswitch
–
4%
May 15NmConsole/Login.asp in Ipswitch WhatsUp Professional 2006 and Ipswitch WhatsUp Professional 2006 Premium generates different error messages in a way that allows remote attackers…
CVE-2006-2355
WP
Whatsup Professional
Ipswitch
–
4%
May 15Ipswitch WhatsUp Professional 2006 and Ipswitch WhatsUp Professional 2006 Premium allows remote attackers to obtain full path information via 404 error messages
CVE-2006-2356
WP
Whatsup Professional
Ipswitch
–
6%
May 15NmConsole/utility/RenderMap.asp in Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allows remote attackers to obtain sensitive information about network…
CVE-2006-2357
WP
Whatsup Professional
Ipswitch
–
4%
May 15Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allows remote attackers to obtain source code for scripts via a trailing dot in a request to…
CVE-2006-0911
WH
Whatsup
Ipswitch
–
16%
Feb 28NmService.exe in Ipswitch WhatsUp Professional 2006 allows remote attackers to cause a denial of service (CPU consumption) via crafted requests to Login.asp, possibly involving…
CVE-2005-3526
IC
Ipswitch Collaboration Suite
Ipswitch
–
7%
Dec 31Buffer overflow in the IMAP daemon in Ipswitch Collaboration Suite 2006.02 and earlier allows remote authenticated users to execute arbitrary code via a long FETCH command
CVE-2005-1939
WS
Whatsup Small Business
Ipswitch
–
64%
Dec 31Directory traversal vulnerability in Ipswitch WhatsUp Small Business 2004 allows remote attackers to read arbitrary files via ".." (dot dot) sequences in a request to the Report…