Ipswitch Imail vulnerabilities, page 2

38 vulnerabilities

Known vulnerabilities in Ipswitch Imail, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5MediumCVE-2000-0056ipswitch · imailipswitch imailIMail IMONITOR status.cgi CGI script allows remote attackers to cause a denial of service with many calls to status.cgi.EPSS6.05%5MediumCVE-2000-0301ipswitch · imailipswitch imailIpswitch IMAIL server 6.02 and earlier allows remote attackers to cause a denial of service via the AUTH CRAM-MD5 command.EPSS3.96%5MediumCVE-2000-0825ipswitch · imailipswitch imailIpswitch Imail 6.0 allows remote attackers to cause a denial of service via a large number of connections in which a long Host: header is sent, which causes a thread to crash.EPSS6.67%2.1LowCVE-2000-0019ipswitch · imailipswitch imailIMail POP3 daemon uses weak encryption, which allows local users to read files.EPSS0.22%6.8MediumCVE-2011-1430ipswitch · imailipswitch imailThe STARTTLS implementation in the server in Ipswitch IMail 11.03 and earlier does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411.EPSS3.21%10CriticalCVE-1999-1046ipswitch · imailipswitch imailBuffer overflow in IMonitor in IMail 5.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to port 8181.EPSS14.80%4.6MediumCVE-1999-1171ipswitch · imail +1 moreipswitch imailIPswitch WS_FTP allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920.EPSS4.89%7.2HighCVE-1999-1497ipswitch · imailipswitch imailIpswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts.EPSS1.40%4.6MediumCVE-1999-1170ipswitch · imail +1 moreipswitch imailIPswitch IMail allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920.EPSS3.68%5MediumCVE-1999-1551ipswitch · imailipswitch imailBuffer overflow in Ipswitch IMail Service 5.0 allows an attacker to cause a denial of service (crash) and possibly execute arbitrary commands via a long URL.EPSS71.79%5MediumCVE-1999-1557ipswitch · imailipswitch imailBuffer overflow in the login functions in IMAP server (imapd) in Ipswitch IMail 5.0 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a long user name or (2) a long password.EPSS8.44%5MediumCVE-2004-2423ipswitch · imailipswitch imailUnknown vulnerability in the Web calendaring component of Ipswitch IMail Server before 8.13 allows remote attackers to cause a denial of service (crash) via "specific content."EPSS4.89%5MediumCVE-2004-2422ipswitch · imailipswitch imailMultiple features in Ipswitch IMail Server before 8.13 allow remote attackers to cause a denial of service (crash) via (1) a long sender field to the Queue Manager or (2) a long To field to the Web Messaging component.EPSS7.09%4.6MediumCVE-2004-1520ipswitch · imailipswitch imailStack-based buffer overflow in IPSwitch IMail 8.13 allows remote authenticated users to execute arbitrary code via a long IMAP DELETE command.EPSS88.51%10CriticalCVE-2004-0297ipswitch · imailipswitch imailBuffer overflow in the Lightweight Directory Access Protocol (LDAP) daemon (iLDAP.exe 3.9.15.10) in Ipswitch IMail Server 8.03 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via an LDAP message with a large tag length.EPSS68.13%7.5HighCVE-2002-1076ipswitch · imailipswitch imailBuffer overflow in the Web Messaging daemon for Ipswitch IMail before 7.12 allows remote attackers to execute arbitrary code via a long HTTP GET request for HTTP/1.0.EPSS13.84%5MediumCVE-2002-1077ipswitch · imailipswitch imailIPSwitch IMail Web Calendaring service (iwebcal) allows remote attackers to cause a denial of service (crash) via an HTTP POST request without a Content-Length field.EPSS10.66%10CriticalCVE-2002-0777ipswitch · imailipswitch imailBuffer overflow in the LDAP component of Ipswitch IMail 7.1 and earlier allows remote attackers to execute arbitrary code via a long "bind DN" parameter.EPSS10.32%