CVE-2004-1884: Ipswitch Ws FTP Pro

High severity, CVSS 7.5. EPSS: 5.8% chance of exploitation in the next 30 days.

Ipswitch WS_FTP Server 4.0.2 has a backdoor XXSESS_MGRYY username with a default password, which allows remote attackers to gain access.

Affected products

• Ipswitch Ws FTP Pro: version 6.0 only; version 7.5 only; version 8.0_2 only; version 8.0_3 only
• Ipswitch WS_FTP Server: version 3.0_1 only; version 4.01 only
• Progress WS_FTP Server: version 1.0.1 only; version 1.0.2 only; version 1.0.3 only; version 1.0.4 only; version 1.0.5 only; version 2.0 only; …

Published 2004-03-23. Last modified 2026-06-16.