Ipswitch vulnerabilities, page 4
106 vulnerabilities
Known vulnerabilities in Ipswitch products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 26 products.
CVE-2017-6195ipswitchmoveit_dmz+1
EPSS score1.99%
Ipswitch MOVEit Transfer (formerly DMZ) allows pre-authentication blind SQL injection. The fixed versions are MOVEit Transfer 2017 9.0.0.201, MOVEit DMZ 8.3.0.30, and MOVEit DMZ 8.2.0.20.CVE-2017-12639ipswitchimail_serverEPSS score2.51%
Stack based buffer overflow in Ipswitch IMail server up to and including 12.5.5 allows remote attackers to execute arbitrary code via unspecified vectors in IMmailSrv, aka ETRE or ETCTERARED.CVE-2017-12638ipswitchimail_serverEPSS score2.51%
Stack based buffer overflow in Ipswitch IMail server up to and including 12.5.5 allows remote attackers to execute arbitrary code via unspecified vectors in IMmailSrv, aka ETBL or ETCETERABLUE.CVE-1999-1046ipswitchimailEPSS score14.80%
Buffer overflow in IMonitor in IMail 5.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to port 8181.CVE-1999-1171ipswitchimail+1EPSS score4.89%
IPswitch WS_FTP allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920.CVE-1999-1497ipswitchimailEPSS score1.40%
Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts.CVE-1999-1170ipswitchimail+1EPSS score3.68%
IPswitch IMail allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920.CVE-1999-1078ipswitchws_ftp_proEPSS score1.80%
WS_FTP Pro 6.0 uses weak encryption for passwords in its initialization files, which allows remote attackers to easily decrypt the passwords and gain privileges.CVE-1999-1551ipswitchimailEPSS score71.79%
Buffer overflow in Ipswitch IMail Service 5.0 allows an attacker to cause a denial of service (crash) and possibly execute arbitrary commands via a long URL.CVE-1999-1557ipswitchimailEPSS score8.44%
Buffer overflow in the login functions in IMAP server (imapd) in Ipswitch IMail 5.0 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a long user name or (2) a long password.CVE-1999-0362ipswitchws_ftp_serverEPSS score2.05%
WS_FTP server remote denial of service through cwd command.CVE-2004-2423ipswitchimailEPSS score4.89%
Unknown vulnerability in the Web calendaring component of Ipswitch IMail Server before 8.13 allows remote attackers to cause a denial of service (crash) via "specific content."CVE-2004-2401ipswitchimail_expressEPSS score3.53%
Stack-based buffer overflow in Ipswitch IMail Express Web Messaging before 8.05 might allow remote attackers to execute arbitrary code via an HTML message with long "tag text."CVE-2004-2422ipswitchimailEPSS score7.09%
Multiple features in Ipswitch IMail Server before 8.13 allow remote attackers to cause a denial of service (crash) via (1) a long sender field to the Queue Manager or (2) a long To field to the Web Messaging component.CVE-2004-1135ipswitchws_ftp_serverEPSS score49.64%
Multiple buffer overflows in WS_FTP Server 5.03 2004.10.14 allow remote attackers to cause a denial of service (service crash) via long (1) SITE, (2) XMKD, (3) MKD, and (4) RNFR commands.CVE-2004-1520ipswitchimailEPSS score88.51%
Stack-based buffer overflow in IPSwitch IMail 8.13 allows remote authenticated users to execute arbitrary code via a long IMAP DELETE command.CVE-2004-1884ipswitchws_ftp_pro+2EPSS score5.80%
Ipswitch WS_FTP Server 4.0.2 has a backdoor XXSESS_MGRYY username with a default password, which allows remote attackers to gain access.CVE-2004-1848ipswitchws_ftp_server+1EPSS score8.09%
Ipswitch WS_FTP Server 4.0.2 allows remote attackers to cause a denial of service (disk consumption) and bypass file size restrictions via a REST command with a large size argument, followed by a STOR of a smaller file.CVE-2004-0799ipswitchwhatsup_gold+1EPSS score6.20%
The HTTP daemon in Ipswitch WhatsUp Gold 8.03 and 8.03 Hotfix 1 allows remote attackers to cause a denial of service (server crash) via a GET request containing an MS-DOS device name, as demonstrated using "prn.htm".CVE-2004-0297ipswitchimailEPSS score68.13%
Buffer overflow in the Lightweight Directory Access Protocol (LDAP) daemon (iLDAP.exe 3.9.15.10) in Ipswitch IMail Server 8.03 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via an LDAP message with a large tag length.