Vulnerability record · CVE-2007-0887 · published 12 February 2007

CVE-2007-0887: Gecad technologies axigen mail server null pointer dereference vulnerability

Gecad Technologies · Axigen Mail Server

axigen 1.2.6 through 2.0.0b1 does not properly parse login credentials, which allows remote attackers to cause a denial of service (NULL dereference and application crash) via a base64-encoded "*\x00" sequence on the imap port (143/tcp).

7.8 CVSS 2.0 High EPSS 10% · top 4.4% CWE-476 · NULL pointer dereference

7.8CVSS 2.0 base score

10%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

12References

16 Jun 2026Last modified by NVD

Description

AV:N/AC:L/Au:N/C:N/I:N/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Axigen Mail Server Gecad Technologies

References

Link	Tags
http://marc.info/?l=full-disclosure&m=117094708423302&w=2	Third Party Advisory
http://osvdb.org/33165	Broken Link
http://secunia.com/advisories/24073	Permissions Required
http://www.securityfocus.com/bid/22473	Third Party AdvisoryVDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/32345
https://www.exploit-db.com/exploits/3290
http://marc.info/?l=full-disclosure&m=117094708423302&w=2	Third Party Advisory
http://osvdb.org/33165	Broken Link
http://secunia.com/advisories/24073	Permissions Required
http://www.securityfocus.com/bid/22473	Third Party AdvisoryVDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/32345
https://www.exploit-db.com/exploits/3290

Track CVE-2007-0887 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2007-0886Gecad technologies axigen mail server memory buffer overflow vulnerabilityHeap-based buffer underflow in axigen 1.2.6 through 2.0.0b1 allows remote attackers to cause a denial of service (application crash) and possibly exe…EPSS 8.7%12 Feb 2007 9.3CVE-2008-0434Gecad technologies axigen mail server vulnerabilityFormat string vulnerability in the AXIMilter module in AXIGEN Mail Server 5.0.2 allows remote attackers to execute arbitrary code via format string s…EPSS 10%23 Jan 2008 6.2CVE-2026-21525Windows Remote Access Connection Manager null pointer dereference DoSWindows Remote Access Connection Manager contains a null pointer dereference (CWE-476) that lets an unauthorized attacker deny service locally. The f…KEVEPSS 4.8%analysed10 Feb 2026

Source: NIST National Vulnerability Database (record CVE-2007-0887), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.