CVE-2001-1284: Ipswitch Imail

High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days.

Ipswitch IMail 7.04 and earlier uses predictable session IDs for authentication, which allows remote attackers to hijack sessions of other users.

Affected products

• Ipswitch Imail: version 6.0.2 only; version 6.0.6 only; version 7.0.4 only

Published 2001-10-12. Last modified 2026-06-16.