CVE-2007-3927

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 21.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-07-21 · updated 2026-06-16

Description

Multiple buffer overflows in Ipswitch IMail Server 2006 before 2006.21 (1) allow remote attackers to execute arbitrary code via unspecified vectors in Imailsec and (2) allow attackers to have an unknown impact via an unspecified vector related to "subscribe."

Affected products

Ipswitch Imail Server: through 2006.2
Ipswitch Collaboration Suite: through 2006.2

References

http://docs.ipswitch.com/IMail%202006.21/ReleaseNotes/IMail_RelNotes.htm#NewRelease
http://osvdb.org/45818
http://osvdb.org/45819
http://secunia.com/advisories/26123
http://www.securityfocus.com/bid/24962
http://www.securitytracker.com/id?1018421
http://www.vupen.com/english/advisories/2007/2574
https://exchange.xforce.ibmcloud.com/vulnerabilities/35504
https://exchange.xforce.ibmcloud.com/vulnerabilities/35505
http://docs.ipswitch.com/IMail%202006.21/ReleaseNotes/IMail_RelNotes.htm#NewRelease
http://osvdb.org/45818
http://osvdb.org/45819

Get alerted when CVE-2007-3927 or the next vulnerability affects your stack