Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

12 records

Priority LOW 26

Multiple cross-site scripting (XSS) vulnerabilities in the web client interface in Ipswitch IMail Server 12.3 and 12.4, possibly before 12.4.1.15, allow remote attackers to inject arbitrary web script or HTML via (1) the…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03468 Published 2014-06-05 No fix listed CWE-79
Priority HIGH 70

Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary code via the (1) Search or (2) Search Charset command.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.84673 Published 2007-07-21 No fix listed CWE-119
Priority MEDIUM 40

Format string vulnerability in the SMTP service in IMail Server 8.20 in Ipswitch Collaboration Suite (ICS) before 2.02 allows remote attackers to execute arbitrary code via format string specifiers to the (1) EXPN, (2) M…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04737 Published 2005-12-07 No fix listed
Priority LOW 32

The IMAP server in IMail Server 8.20 in Ipswitch Collaboration Suite (ICS) before 2.02 allows remote attackers to cause a denial of service (crash) via a long argument to the LIST command, which causes IMail Server to re…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.10816 Published 2005-12-07 No fix listed CWE-20