GCVE - cpe:2.3:a:ipswitch:imail_server:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ipswitch:imail_server:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Ipswitch (`f980cf58-ade3-5008-97dc-5202aeb62886`)
Product	Imail Server (`ba2aa1af-58f3-5ee0-aa23-b1574ff359b5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-12639`	vulnerable	2026-06-03 14:36:36.518215	Details available Stack based buffer overflow in Ipswitch IMail server up to and including 12.5.5 allows remote attackers to execute arbitrary code via unspecified vectors in IMmailSrv, aka ETRE or ETCTERARED. Published: 2017-10-02T21:00:00.000Z Updated: 2024-08-05T18:43:56.444Z Open on db.gcve.eu Reference links https://docs.ipswitch.com/_Messaging/IMailServer/v12.5.6/ReleaseNotes/index.htm#link8	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-12638`	vulnerable	2026-06-03 14:36:36.517828	Details available Stack based buffer overflow in Ipswitch IMail server up to and including 12.5.5 allows remote attackers to execute arbitrary code via unspecified vectors in IMmailSrv, aka ETBL or ETCETERABLUE. Published: 2017-10-02T21:00:00.000Z Updated: 2024-08-05T18:43:56.413Z Open on db.gcve.eu Reference links https://docs.ipswitch.com/_Messaging/IMailServer/v12.5.6/ReleaseNotes/index.htm#link8	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-3927`	vulnerable	2026-06-03 14:28:17.527715	Details available Multiple buffer overflows in Ipswitch IMail Server 2006 before 2006.21 (1) allow remote attackers to execute arbitrary code via unspecified vectors in Imailsec and (2) allow attackers to have an unknown impact via an unspecified vector related to "subscribe." Published: 2007-07-21T00:00:00.000Z Updated: 2024-08-07T14:37:05.329Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2007/2574 http://www.securityfocus.com/bid/24962 https://exchange.xforce.ibmcloud.com/vulnerabilities/35505 http://osvdb.org/45819 http://docs.ipswitch.com/IMail%202006.21/ReleaseNotes/IMail_RelNotes.htm#NewRelease	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-3925`	vulnerable	2026-06-03 14:28:17.525529	Details available Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary code via the (1) Search or (2) Search Charset command. Published: 2007-07-21T00:00:00.000Z Updated: 2024-08-07T14:37:05.326Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2007/2574 http://www.securityfocus.com/bid/24962 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=563 http://www.securitytracker.com/id?1018419 https://exchange.xforce.ibmcloud.com/vulnerabilities/35496	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-1256`	vulnerable	2026-06-03 14:26:58.554087	Details available Stack-based buffer overflow in the IMAP daemon (IMAPD32.EXE) in IMail 8.13 in Ipswitch Collaboration Suite (ICS), and other versions before IMail Server 8.2 Hotfix 2, allows remote authenticated users to execute arbitrary code via a STATUS command with a long mailbox name. Published: 2005-05-25T04:00:00.000Z Updated: 2024-08-07T21:44:05.453Z Open on db.gcve.eu Reference links http://www.ipswitch.com/support/imail/releases/imail_professional/im82hf2.html http://www.securityfocus.com/bid/13727 http://securitytracker.com/id?1014047 http://www.idefense.com/application/poi/display?id=244&type=vulnerabilities	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-1255`	vulnerable	2026-06-03 14:26:58.553568	Details available Multiple stack-based buffer overflows in the IMAP server in IMail 8.12 and 8.13 in Ipswitch Collaboration Suite (ICS), and other versions before IMail Server 8.2 Hotfix 2, allow remote attackers to execute arbitrary code via a LOGIN command with (1) a long username argument or (2) a long username argument that begins with a special character. Published: 2005-05-25T04:00:00.000Z Updated: 2024-08-07T21:44:06.254Z Open on db.gcve.eu Reference links http://www.ipswitch.com/support/imail/releases/imail_professional/im82hf2.html http://www.securityfocus.com/bid/13727 http://securitytracker.com/id?1014047 http://www.idefense.com/application/poi/display?id=243&type=vulnerabilities	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-1252`	vulnerable	2026-06-03 14:26:58.549855	Details available Directory traversal vulnerability in the Web Calendaring server in Ipswitch Imail 8.13, and other versions before IMail Server 8.2 Hotfix 2, allows remote attackers to read arbitrary files via "..\" (dot dot backslash) sequences in the query string argument in a GET request to a non-existent .jsp file. Published: 2005-05-25T04:00:00.000Z Updated: 2024-08-07T21:44:05.691Z Open on db.gcve.eu Reference links http://www.idefense.com/application/poi/display?id=242&type=vulnerabilities http://www.ipswitch.com/support/imail/releases/imail_professional/im82hf2.html http://www.securityfocus.com/bid/13727 http://securitytracker.com/id?1014047	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.