Ipswitch Imail
38 CVEs affecting Ipswitch Imail. Latest disclosed: 2011-03-16. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2005-2160 | High | 7.5 | 2005-07-06 | IMail stores usernames and passwords in cleartext in a cookie, which allows remote attackers to obtain sensitive information. |
CVE-2011-1430 | | 2011-03-16 | The STARTTLS implementation in the server in Ipswitch IMail 11.03 and earlier does not properly restrict I/O buffering, which allows man-in-the-middle attacker… | |
CVE-2007-2795 | | 2009-01-27 | Multiple buffer overflows in Ipswitch IMail before 2006.21 allow remote attackers or authenticated users to execute arbitrary code via (1) the authentication f… | |
CVE-2007-5094 | | 2007-09-26 | Heap-based buffer overflow in iaspam.dll in the SMTP Server in Ipswitch IMail Server 8.01 through 8.11 allows remote attackers to execute arbitrary code via a… | |
CVE-2007-1637 | | 2007-03-23 | Multiple buffer overflows in the IMAILAPILib ActiveX control (IMailAPI.dll) in Ipswitch IMail Server before 2006.2 allow remote attackers to execute arbitrary… | |
CVE-2005-1256 | | 2005-05-25 | Stack-based buffer overflow in the IMAP daemon (IMAPD32.EXE) in IMail 8.13 in Ipswitch Collaboration Suite (ICS), and other versions before IMail Server 8.2 Ho… | |
CVE-2005-1255 | | 2005-05-25 | Multiple stack-based buffer overflows in the IMAP server in IMail 8.12 and 8.13 in Ipswitch Collaboration Suite (ICS), and other versions before IMail Server 8… | |
CVE-2005-1254 | | 2005-05-25 | Stack-based buffer overflow in the IMAP server for Ipswitch IMail 8.12 and 8.13, and other versions before IMail Server 8.2 Hotfix 2, allows remote authenticat… | |
CVE-2005-1252 | | 2005-05-25 | Directory traversal vulnerability in the Web Calendaring server in Ipswitch Imail 8.13, and other versions before IMail Server 8.2 Hotfix 2, allows remote atta… | |
CVE-1999-1557 | | 2005-05-02 | Buffer overflow in the login functions in IMAP server (imapd) in Ipswitch IMail 5.0 and earlier allows remote attackers to cause a denial of service and possib… | |
CVE-2004-2423 | | 2004-12-31 | Unknown vulnerability in the Web calendaring component of Ipswitch IMail Server before 8.13 allows remote attackers to cause a denial of service (crash) via "s… | |
CVE-2004-2422 | | 2004-12-31 | Multiple features in Ipswitch IMail Server before 8.13 allow remote attackers to cause a denial of service (crash) via (1) a long sender field to the Queue Man… | |
CVE-2004-1520 | | 2004-12-31 | Stack-based buffer overflow in IPSwitch IMail 8.13 allows remote authenticated users to execute arbitrary code via a long IMAP DELETE command. | |
CVE-2004-0297 | | 2004-11-23 | Buffer overflow in the Lightweight Directory Access Protocol (LDAP) daemon (iLDAP.exe 3.9.15.10) in Ipswitch IMail Server 8.03 allows remote attackers to cause… | |
CVE-2002-1077 | | 2002-10-04 | IPSwitch IMail Web Calendaring service (iwebcal) allows remote attackers to cause a denial of service (crash) via an HTTP POST request without a Content-Length… | |
CVE-2002-1076 | | 2002-10-04 | Buffer overflow in the Web Messaging daemon for Ipswitch IMail before 7.12 allows remote attackers to execute arbitrary code via a long HTTP GET request for HT… | |
CVE-2002-0777 | | 2002-08-12 | Buffer overflow in the LDAP component of Ipswitch IMail 7.1 and earlier allows remote attackers to execute arbitrary code via a long "bind DN" parameter. | |
CVE-2001-1211 | | 2001-12-31 | Ipswitch IMail 7.0.4 and earlier allows attackers with administrator privileges to read and modify user alias and mailing list information for other domains ho… | |
CVE-2001-1287 | | 2001-10-12 | Buffer overflow in Web Calendar in Ipswitch IMail 7.04 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request. | |
CVE-2001-1286 | | 2001-10-12 | Ipswitch IMail 7.04 and earlier stores a user's session ID in a URL, which could allow remote attackers to hijack sessions by obtaining the URL, e.g. via an HT… |