Browse CVEs

HIGH 7.2 CVE-2005-0707 Buffer overflow in the IMAP daemon (IMAP4d32.exe) for Ipswitch Collaboration Suite (ICS) before 8.15 Hotfix 1 allows remote authenticated users to ex… Ipswitch Collaboration Suite after 8.15 Fix from $1,9502005-05-02 MEDIUM 5.0 CVE-1999-1557EPSS 8% Buffer overflow in the login functions in IMAP server (imapd) in Ipswitch IMail 5.0 and earlier allows remote attackers to cause a denial of service … Imail after 5.0 Fix from $1,6002005-05-02 MEDIUM 5.0 CVE-2004-1135EPSS 50% Multiple buffer overflows in WS_FTP Server 5.03 2004.10.14 allow remote attackers to cause a denial of service (service crash) via long (1) SITE, (2)… Ws Ftp Server Mitigation only Fix from $1,6002005-01-10 HIGH 7.5 CVE-2004-2401 Stack-based buffer overflow in Ipswitch IMail Express Web Messaging before 8.05 might allow remote attackers to execute arbitrary code via an HTML me… Imail Express Patch available Fix from $1,9502004-12-31 MEDIUM 5.0 CVE-2004-1848EPSS 8% Ipswitch WS_FTP Server 4.0.2 allows remote attackers to cause a denial of service (disk consumption) and bypass file size restrictions via a REST com… Ws Ftp Server Patch available Fix from $1,6002004-12-31 MEDIUM 5.0 CVE-2004-2422EPSS 7% Multiple features in Ipswitch IMail Server before 8.13 allow remote attackers to cause a denial of service (crash) via (1) a long sender field to the… Imail Patch available Fix from $1,6002004-12-31 MEDIUM 5.0 CVE-2004-2423 Unknown vulnerability in the Web calendaring component of Ipswitch IMail Server before 8.13 allows remote attackers to cause a denial of service (cra… Imail Patch available Fix from $1,6002004-12-31 HIGH 10.0 CVE-2004-0297EPSS 68% Buffer overflow in the Lightweight Directory Access Protocol (LDAP) daemon (iLDAP.exe 3.9.15.10) in Ipswitch IMail Server 8.03 allows remote attacker… Imail Patch available Fix from $1,9502004-11-23 MEDIUM 5.0 CVE-2004-0799EPSS 6% The HTTP daemon in Ipswitch WhatsUp Gold 8.03 and 8.03 Hotfix 1 allows remote attackers to cause a denial of service (server crash) via a GET request… Whatsup Gold Patch available Fix from $1,6002004-10-20 HIGH 7.5 CVE-2004-1884EPSS 6% Ipswitch WS_FTP Server 4.0.2 has a backdoor XXSESS_MGRYY username with a default password, which allows remote attackers to gain access. Ws Ftp Pro Patch available Fix from $1,9502004-03-23 HIGH 7.5 CVE-2003-0772EPSS 85% Multiple buffer overflows in WS_FTP 3 and 4 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via lon… Ws Ftp Server No fix yet Fix from $1,9502003-09-22 HIGH 7.5 CVE-2002-1851 Buffer overflow in WS_FTP Pro 7.5 allows remote attackers to execute code on a client system via unknown attack vectors. Ws Ftp Pro Mitigation only Fix from $1,9502002-12-31 HIGH 7.5 CVE-2002-1076EPSS 14% Buffer overflow in the Web Messaging daemon for Ipswitch IMail before 7.12 allows remote attackers to execute arbitrary code via a long HTTP GET requ… Imail Patch available Fix from $1,9502002-10-04 MEDIUM 5.0 CVE-2002-1077EPSS 11% IPSwitch IMail Web Calendaring service (iwebcal) allows remote attackers to cause a denial of service (crash) via an HTTP POST request without a Cont… Imail No fix yet Fix from $1,6002002-10-04 HIGH 10.0 CVE-2002-0777EPSS 10% Buffer overflow in the LDAP component of Ipswitch IMail 7.1 and earlier allows remote attackers to execute arbitrary code via a long "bind DN" parame… Imail Patch available Fix from $1,9502002-08-12 HIGH 7.5 CVE-2001-1211 Ipswitch IMail 7.0.4 and earlier allows attackers with administrator privileges to read and modify user alias and mailing list information for other … Imail Mitigation only Fix from $1,9502001-12-31 HIGH 7.5 CVE-2001-1283 The webmail interface for Ipswitch IMail 7.04 and earlier allows remote authenticated users to cause a denial of service (crash) via a mailbox name t… Imail Mitigation only Fix from $1,9502001-10-12 HIGH 7.5 CVE-2001-1284 Ipswitch IMail 7.04 and earlier uses predictable session IDs for authentication, which allows remote attackers to hijack sessions of other users. Imail Mitigation only Fix from $1,9502001-10-12 HIGH 7.5 CVE-2001-1286 Ipswitch IMail 7.04 and earlier stores a user's session ID in a URL, which could allow remote attackers to hijack sessions by obtaining the URL, e.g.… Imail Patch available Fix from $1,9502001-10-12 HIGH 7.5 CVE-2001-1287EPSS 10% Buffer overflow in Web Calendar in Ipswitch IMail 7.04 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request. Imail Mitigation only Fix from $1,9502001-10-12 MEDIUM 5.0 CVE-2001-1280 POP3 Server for Ipswitch IMail 7.04 and earlier generates different responses to valid and invalid user names, which allows remote attackers to deter… Imail Mitigation only Fix from $1,6002001-10-12 MEDIUM 5.0 CVE-2001-1281 Web Messaging Server for Ipswitch IMail 7.04 and earlier allows remote authenticated users to change information for other users by modifying the old… Imail Mitigation only Fix from $1,6002001-10-12 MEDIUM 5.0 CVE-2001-1282 Ipswitch IMail 7.04 and earlier records the physical path of attachments in an e-mail message header, which could allow remote attackers to obtain po… Imail Mitigation only Fix from $1,6002001-10-12 MEDIUM 5.0 CVE-2001-1285 Directory traversal vulnerability in readmail.cgi for Ipswitch IMail 7.04 and earlier allows remote attackers to access the mailboxes of other users … Imail Mitigation only Fix from $1,6002001-10-12 HIGH 7.5 CVE-2001-0494 Buffer overflow in IPSwitch IMail SMTP server 6.06 and possibly prior versions allows remote attackers to execute arbitrary code via a long From: hea… Imail after 6.06 Fix from $1,9502001-06-27 MEDIUM 5.0 CVE-2001-0039 IPSwitch IMail 6.0.5 allows remote attackers to cause a denial of service using the SMTP AUTH command by sending a base64-encoded user password whose… Imail Patch available Fix from $1,6002001-02-16 MEDIUM 5.0 CVE-2000-0825EPSS 7% Ipswitch Imail 6.0 allows remote attackers to cause a denial of service via a large number of connections in which a long Host: header is sent, which… Imail No fix yet Fix from $1,6002000-11-14 MEDIUM 5.0 CVE-2000-0839 WinCOM LPD 1.00.90 allows remote attackers to cause a denial of service via a large number of LPD options to the LPD port (515). Wincom Lpd Mitigation only Fix from $1,6002000-11-14 MEDIUM 6.4 CVE-2000-0780EPSS 7% The web server in IPSWITCH IMail 6.04 and earlier allows remote attackers to read and delete arbitrary files via a .. (dot dot) attack. Imail Mitigation only Fix from $1,6002000-10-20 MEDIUM 5.0 CVE-2000-0301 Ipswitch IMAIL server 6.02 and earlier allows remote attackers to cause a denial of service via the AUTH CRAM-MD5 command. Imail Patch available Fix from $1,6002000-04-06