CVE-1999-1497: Ipswitch Imail

High severity, CVSS 7.2. EPSS: 1.4% chance of exploitation in the next 30 days.

Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts.

Affected products

• Ipswitch Imail: version 5.0 only; version 5.0.5 only; version 5.0.6 only; version 5.0.7 only; version 5.0.8 only; version 6.0 only

Published 1999-12-21. Last modified 2026-06-16.