CVE-2001-1283: Ipswitch Imail

High severity, CVSS 7.5. EPSS: 4.1% chance of exploitation in the next 30 days.

The webmail interface for Ipswitch IMail 7.04 and earlier allows remote authenticated users to cause a denial of service (crash) via a mailbox name that contains a large number of . (dot) or other characters to programs such as (1) readmail.cgi or (2) printmail.cgi, possibly due to a buffer overflow that may allow execution of arbitrary code.

Affected products

• Ipswitch Imail: version 6.0.2 only; version 6.0.6 only; version 7.0.4 only

Published 2001-10-12. Last modified 2026-06-16.