Imail Security Vulnerabilities and Issues — Imail CVE List

Lucene search

IpswitchImail

10 matches found

CVE•added 2001/09/18 4:0 a.m.•52 views

CVE-2001-0494

Buffer overflow in IPSwitch IMail SMTP server 6.06 and possibly prior versions allows remote attackers to execute arbitrary code via a long From: header.

7.5CVSS8AI score0.0056EPSS

CVE•added 2005/07/06 4:0 a.m.•46 views

CVE-2005-2160

IMail stores usernames and passwords in cleartext in a cookie, which allows remote attackers to obtain sensitive information.

7.5CVSS6.8AI score0.01005EPSS

CVE•added 2002/05/03 4:0 a.m.•43 views

CVE-2001-1287

Buffer overflow in Web Calendar in Ipswitch IMail 7.04 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.

7.5CVSS8.3AI score0.06319EPSS

CVE•added 2002/05/03 4:0 a.m.•41 views

CVE-2001-1286

Ipswitch IMail 7.04 and earlier stores a user's session ID in a URL, which could allow remote attackers to hijack sessions by obtaining the URL, e.g. via an HTML email that causes the Referrer to be sent to a URL under the attacker's control.

7.5CVSS6.5AI score0.00673EPSS

CVE•added 2001/09/12 4:0 a.m.•37 views

CVE-1999-1497

Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts.

7.2CVSS6.7AI score0.00215EPSS

CVE•added 2002/05/03 4:0 a.m.•36 views

CVE-2001-1283

The webmail interface for Ipswitch IMail 7.04 and earlier allows remote authenticated users to cause a denial of service (crash) via a mailbox name that contains a large number of . (dot) or other characters to programs such as (1) readmail.cgi or (2) printmail.cgi, possibly due to a buffer overflo...

7.5CVSS7.3AI score0.01873EPSS

CVE•added 2002/03/15 5:0 a.m.•35 views

CVE-2001-1211

Ipswitch IMail 7.0.4 and earlier allows attackers with administrator privileges to read and modify user alias and mailing list information for other domains hosted by the same server via the (1) aliasadmin or (2) listadm1 CGI programs, which do not properly verify that an administrator is the admin...

7.5CVSS6.7AI score0.0057EPSS

CVE•added 2002/05/03 4:0 a.m.•34 views

CVE-2001-1284

Ipswitch IMail 7.04 and earlier uses predictable session IDs for authentication, which allows remote attackers to hijack sessions of other users.

7.5CVSS7.2AI score0.00681EPSS

CVE•added 2007/09/26 10:17 p.m.•34 views

CVE-2007-5094

Heap-based buffer overflow in iaspam.dll in the SMTP Server in Ipswitch IMail Server 8.01 through 8.11 allows remote attackers to execute arbitrary code via a set of four different e-mail messages with a long boundary parameter in a certain malformed Content-Type header line, the string "MIME" by i...

7.5CVSS8.1AI score0.00788EPSS

CVE•added 2003/04/02 5:0 a.m.•30 views

CVE-2002-1076

Buffer overflow in the Web Messaging daemon for Ipswitch IMail before 7.12 allows remote attackers to execute arbitrary code via a long HTTP GET request for HTTP/1.0.

7.5CVSS8.3AI score0.28492EPSS