CVE-2004-1520: ipswitch imail

EPSS trend

Probability

88.51%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

0.00 pp

From 88.51% on 20-09-2026

20-09-202620-10-2026

EPSS score

88.51%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

6 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databaseremotewindowsVerified
IPSwitch IMail 8.13 - 'DELETE' Remote Stack Overflow
Maturity: weaponized
exploit-databaseremotewindowsVerified
IPSwitch IMail IMAP4D - Delete Overflow (Metasploit)
Maturity: weaponized

Show all 6 exploits

exploit-databaseremotewindowsVerified
MDaemon 8.0.3 - IMAPD CRAM-MD5 Authentication Overflow (Metasploit)
Maturity: weaponized
MetasploitremoteUnverified
IMail IMAP4D Delete Overflow
exploit/windows/imap/imail_delete
Maturity: poc
MetasploitremoteVerified
Mdaemon 8.0.3 IMAPD CRAM-MD5 Authentication Overflow
exploit/windows/imap/mdaemon_cram_md5
Maturity: weaponized

References

4 links

secunia.com/advisories/13200Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
marc.info?l=bugtraq&m=110037283803560&w=2Mailing ListX Refsource BUGTRAQ
exchange.xforce.ibmcloud.com/vulnerabilities/18058VDB EntryX Refsource XF
www.securityfocus.com/bid/11675VDB EntryX Refsource BIDExploitPatch

Related vulnerabilities

CVE-2007-2795ipswitchimail24.45%17y ago27-01-2009 23:00Multiple buffer overflows in Ipswitch IMail before 2006.21 allow remote attackers or authenticated users to execute arbitrary code via (1) the authentication feature in IMailsec.dll, which triggers heap corruption in the IMail Server, or (2) a long SUBSCRIBE IMAP command, which triggers a stack-based buffer overflow in the IMAP Daemon.CVE-2007-1637ipswitchimail+35.64%19y ago23-03-2007 22:00Multiple buffer overflows in the IMAILAPILib ActiveX control (IMailAPI.dll) in Ipswitch IMail Server before 2006.2 allow remote attackers to execute arbitrary code via the (1) WebConnect and (2) Connect members in the (a) IMailServer control; (3) Sync3 and (4) Init3 members in the (b) IMailLDAPService control; and the (5) SetReplyTo member in the (c) IMailUserCollection control.CVE-2007-5094ipswitchimail4.36%19y ago26-09-2007 22:00Heap-based buffer overflow in iaspam.dll in the SMTP Server in Ipswitch IMail Server 8.01 through 8.11 allows remote attackers to execute arbitrary code via a set of four different e-mail messages with a long boundary parameter in a certain malformed Content-Type header line, the string "MIME" by itself on a line in the header, and a long Content-Transfer-Encoding header line.CVE-2001-1281ipswitchimail2.38%24y ago03-05-2002 04:00Web Messaging Server for Ipswitch IMail 7.04 and earlier allows remote authenticated users to change information for other users by modifying the olduser parameter in the "Change User Information" web form.CVE-2001-1285ipswitchimail2.66%24y ago03-05-2002 04:00Directory traversal vulnerability in readmail.cgi for Ipswitch IMail 7.04 and earlier allows remote attackers to access the mailboxes of other users via a .. (dot dot) in the mbx parameter.CVE-2001-1284ipswitchimail2.24%24y ago03-05-2002 04:00Ipswitch IMail 7.04 and earlier uses predictable session IDs for authentication, which allows remote attackers to hijack sessions of other users.

All vulnerabilities inimail

CVE-2004-1520: ipswitch imail

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References