← Vulnerability feed

Vulnerability record · CVE-2007-3927 · published 21 July 2007

CVE-2007-3927: Ipswitch imail server vulnerability

Ipswitch · Imail Server

Multiple buffer overflows in Ipswitch IMail Server 2006 before 2006.21 (1) allow remote attackers to execute arbitrary code via unspecified vectors in Imailsec and (2) allow attackers to have an unknown impact via an unspecified vector related to "subscribe."

10.0 CVSS 2.0 High EPSS 22% · top 2.4%
10.0CVSS 2.0 base score
22%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
18References
16 Jun 2026Last modified by NVD

Description

Multiple buffer overflows in Ipswitch IMail Server 2006 before 2006.21 (1) allow remote attackers to execute arbitrary code via unspecified vectors in Imailsec and (2) allow attackers to have an unknown impact via an unspecified vector related to "subscribe."

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://docs.ipswitch.com/IMail%202006.21/ReleaseNotes/IMail_RelNotes.htm#NewRelease Patch
http://osvdb.org/45818
http://osvdb.org/45819
http://secunia.com/advisories/26123
http://www.securityfocus.com/bid/24962 Patch
http://www.securitytracker.com/id?1018421
http://www.vupen.com/english/advisories/2007/2574
https://exchange.xforce.ibmcloud.com/vulnerabilities/35504
https://exchange.xforce.ibmcloud.com/vulnerabilities/35505
http://docs.ipswitch.com/IMail%202006.21/ReleaseNotes/IMail_RelNotes.htm#NewRelease Patch
http://osvdb.org/45818
http://osvdb.org/45819
http://secunia.com/advisories/26123
http://www.securityfocus.com/bid/24962 Patch
http://www.securitytracker.com/id?1018421
http://www.vupen.com/english/advisories/2007/2574
https://exchange.xforce.ibmcloud.com/vulnerabilities/35504
https://exchange.xforce.ibmcloud.com/vulnerabilities/35505

Track CVE-2007-3927 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2005-1255Ipswitch imail vulnerabilityMultiple stack-based buffer overflows in the IMAP server in IMail 8.12 and 8.13 in Ipswitch Collaboration Suite (ICS), and other versions before IMai…EPSS 43%10.0CVE-2005-1256IMail IMAP daemon stack buffer overflow via STATUS commandThe IMAP daemon (IMAPD32.EXE) in Ipswitch IMail 8.13 and other versions before IMail Server 8.2 Hotfix 2 contains a stack-based buffer overflow trigg…EPSS 59%analysed9.8CVE-2017-12638Ipswitch imail server memory buffer overflow vulnerabilityStack based buffer overflow in Ipswitch IMail server up to and including 12.5.5 allows remote attackers to execute arbitrary code via unspecified vec…EPSS 2.5%9.8CVE-2017-12639Ipswitch imail server memory buffer overflow vulnerabilityStack based buffer overflow in Ipswitch IMail server up to and including 12.5.5 allows remote attackers to execute arbitrary code via unspecified vec…EPSS 2.5%9.3CVE-2007-1637Ipswitch imail vulnerabilityMultiple buffer overflows in the IMAILAPILib ActiveX control (IMailAPI.dll) in Ipswitch IMail Server before 2006.2 allow remote attackers to execute …EPSS 5.6%7.8CVE-2007-3926Ipswitch imail server vulnerabilityIpswitch IMail Server 2006 before 2006.21 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors involving an "o…EPSS 2.9%7.5CVE-2007-4345Ipswitch imail client memory buffer overflow vulnerabilityBuffer overflow in IMail Client 9.22, as shipped with IPSwitch IMail Server 2006.22, allows remote attackers to execute arbitrary code via a long bou…EPSS 3.2%7.5CVE-2006-4379Ipswitch IMail SMTP daemon stack buffer overflow via crafted address stringThe SMTP daemon in Ipswitch Collaboration Suite 2006 (Premium and Standard), IMail, IMail Plus and IMail Secure contains a stack-based buffer overflo…EPSS 61%analysed

Source: NIST National Vulnerability Database (record CVE-2007-3927), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.