Ipswitch Imserver vulnerabilities

3 vulnerabilities

Known vulnerabilities in Ipswitch Imserver, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5CVE-2007-3959ipswitchimserver+1
EPSS score
6.46%
The IM Server (aka IMserve or IMserver) 2.0.5.30 and probably earlier in Ipswitch Instant Messaging before 2.07 in Ipswitch Collaboration Suite (ICS) allows remote attackers to cause a denial of service (daemon crash) via certain data to TCP port 5179 that overwrites a destructor, as reachable by the (1) DoAttachVideoSender, (2) DoAttachVideoReceiver, (3) DoAttachAudioSender, and (4) DoAttachAudioReceiver functions.4.9CVE-2008-0946ipswitchimserver+1
EPSS score
3.55%
Directory traversal vulnerability in the IM Server (aka IMserve or IMserver) in Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote authenticated users to create arbitrary empty files via a .. (dot dot) in the recipient field.3.5CVE-2008-0945ipswitchimserver+1
EPSS score
6.88%
Format string vulnerability in the logging function in the IM Server (aka IMserve or IMserver) in Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in an IP address field.