CVE-2007-3927: ipswitch imail_server

EPSS trend

Probability

21.89%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 21.89% on 20-09-2026

20-09-202620-10-2026

EPSS score

21.89%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

exploit-databaseremotewindowsVerified
IPSwitch IMail Server 2006 9.10 - Subscribe Remote Overflow
Maturity: weaponized

References

9 links

www.vupen.com/english/advisories/2007/2574VDB EntryX Refsource VUPEN
www.securityfocus.com/bid/24962VDB EntryX Refsource BIDPatch
exchange.xforce.ibmcloud.com/vulnerabilities/35505VDB EntryX Refsource XF
osvdb.org/45819VDB EntryX Refsource OSVDB
docs.ipswitch.com/IMail%202006.21/ReleaseNotes/IMail_RelNotes.htmX Refsource CONFIRMPatch
osvdb.org/45818VDB EntryX Refsource OSVDB
www.securitytracker.com/id?1018421VDB EntryX Refsource SECTRACK
exchange.xforce.ibmcloud.com/vulnerabilities/35504VDB EntryX Refsource XF
secunia.com/advisories/26123Third Party AdvisoryX Refsource SECUNIA

Related vulnerabilities

CVE-2007-1637ipswitchimail+35.64%19y ago23-03-2007 22:00Multiple buffer overflows in the IMAILAPILib ActiveX control (IMailAPI.dll) in Ipswitch IMail Server before 2006.2 allow remote attackers to execute arbitrary code via the (1) WebConnect and (2) Connect members in the (a) IMailServer control; (3) Sync3 and (4) Init3 members in the (b) IMailLDAPService control; and the (5) SetReplyTo member in the (c) IMailUserCollection control.CVE-2007-4345ipswitchimail_client+13.17%18y ago31-10-2007 17:00Buffer overflow in IMail Client 9.22, as shipped with IPSwitch IMail Server 2006.22, allows remote attackers to execute arbitrary code via a long boundary parameter in a multipart MIME e-mail message.CVE-2007-3925ipswitchimail_server+184.67%19y ago21-07-2007 00:00Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary code via the (1) Search or (2) Search Charset command.CVE-2007-3926ipswitchimail_server2.92%19y ago21-07-2007 00:00Ipswitch IMail Server 2006 before 2006.21 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors involving an "overwritten destructor."CVE-2007-3959ipswitchimserver+16.46%19y ago24-07-2007 18:00The IM Server (aka IMserve or IMserver) 2.0.5.30 and probably earlier in Ipswitch Instant Messaging before 2.07 in Ipswitch Collaboration Suite (ICS) allows remote attackers to cause a denial of service (daemon crash) via certain data to TCP port 5179 that overwrites a destructor, as reachable by the (1) DoAttachVideoSender, (2) DoAttachVideoReceiver, (3) DoAttachAudioSender, and (4) DoAttachAudioReceiver functions.CVE-2014-3878ipswitchimail_server3.47%12y ago05-06-2014 17:00Multiple cross-site scripting (XSS) vulnerabilities in the web client interface in Ipswitch IMail Server 12.3 and 12.4, possibly before 12.4.1.15, allow remote attackers to inject arbitrary web script or HTML via (1) the Name field in an add new contact action in the Contacts section or unspecified vectors in (2) an Add Group task in the Contacts section, (3) an add new event action in the Calendar section, or (4) the Task section.

All vulnerabilities inimail_server ipswitch_collaboration_suite

CVE-2007-3927: ipswitch imail_server

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References